Kaspersky Next XDR Expert
Contents
Contents
Deleting incident types
If you want to delete an incident type that is used in a playbook, you have to delete this incident type from the playbook trigger and/or algorithm to avoid errors.
You cannot delete an incident type in the following cases:
- An incident type is set as default in the tenant where this incident type was created.
When trying to delete this incident type, you are prompted to set a new default incident type. In the window that opens, you have to select the incident type from the list.
- An incident type is set as default in a child tenant.
- The current tenant or a child tenant contains an incident with the type that you want to delete.
Before deleting such a type, you have to assign another type to the incident.
To delete the incident type:
- In the main menu, go to Settings → Tenants.
- Click the name of the required tenant.
The tenant's properties window opens.
- On Settings, click Incident management.
The Types tab is displayed with the incident types table.
- Do one of the following:
- Select the incident type that you want to delete, and then click Delete.
- Click the name of the incident type that you want to delete, and then in the Edit incident type window, click Delete.
- In the confirmation dialog box, click Delete.
The incident type is deleted.
Page top