Skip to content

Populate an Incident's severity when it's created from an Alert

Problem to solve

A created incident from the alert should have the same severity level as an initial alert.

Contributes to #229402 (closed) and #230980 (closed)

Intended users

User experience goal

Proposal

When an incident is created from the AlertManagement::Alert it should have the corresponding severity level assigned to IncidentAttribute#severity according to the following table:

Alert Incident
Critical Critical - S1
High High - S2
Medium Medium - S3
Low Low - S4
Error NULL
Info NULL

Further details

Permissions and Security

Documentation

Availability & Testing

What does success look like, and how can we measure that?

What is the type of buyer?

Is this a cross-stage feature?

Links / references