Search

How can I figure out what process is assigning incidents to our accounts?

Environment

Reports, Incident Audit Log

Issue

After checking the Audit Log, I can see that 'Analytics Report' is assigning incidents to one of our accounts.

Resolution

Two types of actions in a report can be used to assign incidents that will have this type of audit log entry showing an incident Edited and Assigned at the same time.  The Edited line will show the source is From Analytics Report and the Assigned line will show who used the report.

1. Using the 'Assign' feature in a report where the report's record command for Incidents > Assign is enabled.   When this action is performed the Assigned line may have the same or different account names in the Who and Description columns, depending on whether the account assigned the incident to themself or someone else.  To disable this configuration see Answer ID 7879: Assigning Incidents through Reports without Permissions
    
2. Using the 'Fill Inbox' feature in a report where the report's record command for Incidents > Fill Inbox is enabled.  When this action is performed the Assigned line will that the same account name in the Who and Description columns.