Legacy Cloud SOAR Incident Management and Triage
This article only applies to organizations having a legacy Cloud SOAR instance URL matching the pattern *.soar.sumologic.com. If it doesn't, refer to Cloud SOAR Incident Management and Triage for documentation of our latest Cloud SOAR SaaS version.
Create a new incident manually
Incident Report
The Report Template section allows you to create templates for custom reporting. The Report Template screen contains a list of all current report templates. To add a new report template, click on the + icon above the report template list.
The Details tab of the new report template window allows you to specify a unique name for the template as well as a template category and any appropriate tags.
The Sections tab of the new report template window allows you to drag and drop sections of the incident into the report template. All incident sections are listed in the left-hand pane. Dragging incident sections to the right-hand pane will add the section to the report template. Sections will be printed in the report in the order they appear in the right-hand pane. Once satisfied with the selection, click Save.
