Comments field for incidents
K
Kyle Maulden
It would be nice to have a comments or notes field for each incident. Having multiple people who receive and respond to incidents, if we could add comments to that incident it would help keep everyone in the loop on additional items that might have been or need to be done for that incident. Cut down on double-work.
N
Neil O'Sullivan
I just wanted to add another voice to being able to add notes without accepting/rejecting incidents while they are still in progress
C
Christopher Vanderlinden
This should still be done. As you (Huntress) stores the incidents 'forever', having a spot where the MSP could add notes or even additional info would be helpful (like being able to say - linked to internal support ticket XXXX - or 'non issue was an administrator testing XYZ'
M
Mungo Bright
Came to suggest this too. It would not only help our team see if someone is already working on an incident, but it would also be a great way to communicate with Huntress about incidents. Save us all time.
T
Timothy Greenfelder
Patrick Sofo [Security Product Manager], your idea would be great! Having all communications relating to an incident viewable from the incident page would be great addition - including links to any exports or attachments.
Also having somewhere for us to link back to our internal ticket system would be a huge benefit for us. I think these are two separate ideas.
M
Matt Powell
Just came here to post the same thing. Having even a short field where we can add a one-sentence summary and our internal Ticket number on an incident would be great - just viewed a historic incident and took me a while to figure out what ticket of ours it related to.
Patrick Sofo [Security Product Manager]
This is definitely something we are looking into Kyle Maulden! I definitely understand the use case for commenting to allow internal team members to have context. How often do you all need to reach back out to Huntress on a given incident? Trying to understand if it might be useful to have some sort of direct channel back to us on the incident itself.