User Problem

Users have manual steps to perform when an alert is received, prior to it being elevated to an incident. Users have to manually convert alerts to incidents if the alarm triage calls for it. Upon converting to incident, the incident templates help users to get the incident filled out uniformly and with the structure determined. But, as the number of incident templates grows, is it more time consuming to select the correct one from the drop down list and prone to mistake.

Suggested Solutions

As a user when manually creating an incident from an alert, I'd like the selection of incident template to default to a template depending on field/data values within the alert. For example, if the alert field "tag = test" then default the incident template selection to "test-incident-template" automatically.