Cisco Cisco Firepower Management Center 2000

Admin/Intrusion Admin

Select 

.

The Incidents page appears.

Click the edit icon (

) next to the incident you want to edit.

You can edit any of the following aspects of the incident:

change the status

change the type

add events from the clipboard

delete events

In the 

 field, enter the amount of additional time you spent on the incident.

In the 

 text box, indicate your changes to the incident (up to 8191 alphanumeric characters, 

spaces and symbols) for the incident.

Optionally, you can add or delete events from the incident:

To add events from the clipboard, select the events on the clipboard and click 

.

To add all the events from the clipboard, click 

.

To delete specific events from the incident, select the events and click 

.

To delete all events from the incident, click 

.

To update the incident without adding or deleting events, click 

.

Your changes to the incident are saved.

Protection

You can use the FireSIGHT System to generate incident reports that can include the incident summary, 
incident status, and any comments along with information from the events you add to the incident. You 
can also specify whether you want to include event summary information in the report.

Admin/Intrusion Admin

Select 

.

The Incidents page appears.

Click the edit icon (

) next to the incident you want to include in your report.

You have two options:

To include all the events from the incident in the report, click 

.

To include specific events from the incident in the report, select the check boxes next to the events 
you want and click 

.