Create an Incident from an Alert
Use this guide when a live alert needs broader coordination and should become an incident.
Steps
- Open Alert Instances.
- Find the alert you want to escalate into incident response.
- Open the alert action menu.
- Click Start incident.
- Complete any required incident details if the flow asks for them.
- Open the created incident.
- Click Join the incident if you are one of the responders.
What happens next
After the incident is created, the incident keeps the shared response context for that alert.
From there, the team can:
- join the same incident
- change status
- change priority
- review history
- update metrics
- write a postmortem later
If the alert already belongs to incident work
Some alert flows already represent incident-side updates.
In those cases, the alert action can show Join incident instead of Start incident.
Use Join incident when the incident already exists and you need to enter that response instead of creating a new one.