Moving an incident to closed ends Jeli’s IR bot’s involvement in the incident channel. Since you have already mitigated the incident, closing it will look a little different than if you are closing it from an investigating or identified stage.

You will be prompted to address any remaining open follow up items created during the incident.

Once any open follow ups are addressed, you are given the option to update the severity and summary of the incident a final time. Then we will update the Jeli opportunity with any messages sent in the incident channel since mitigation, and notify you when that is complete. We will also set the final status update with a link to the Jeli opportunity.

The broadcast channels will be updated as well, moving the incident stage to closed, setting an incident closed time, and linking to the Jeli opportunity.

You can close out an incident at any stage, when closing out an incident that is in the investigating or identified stages, you will first be prompted to address any open follow ups items.

You will then be prompted with the option to rename the incident based on all of the information you’ve gathered throughout response, update severity, and provide a new summary. The new name and summary will be included in the opportunity created in Jeli, as well as updated in the broadcast channels in Slack. Changing the name of the incident will not change the name of the incident channel created in Slack.

We will also let you know you’re closing out an unmitigated incident, and give you the option to instead change the stage of the incident, if you’d like to do so.

Closing the incident will then ends Jeli’s IR bot’s involvement in the incident channel, and creates an opportunity in Jeli for when you’re ready to begin your incident review. We will then update the channel with a final status indicating that the incident is closed and provide a link to the Jeli opportunity.

The broadcast channels will be updated as well, moving the incident stage to closed, setting an incident closed time, and linking to the Jeli opportunity.

Aliases: /jeli close-incident, /jeli end, /jeli end-incident

Ready to start telling the story of your incident? Get started with What is Narrative Builder or our Basic Investigation Tutorial