All Collections
Running and managing incidents
Closing an incident
Closing a Jeli incident in the investigating or identified stage
Closing a Jeli incident in the investigating or identified stage
Michael Donlin avatar
Written by Michael Donlin
Updated over a week ago

Close out an incident in an investigating or identified stage: /jeli close

You can close out an incident at any stage, when closing out an incident that is in the investigating or identified stages.

You will be prompted with the option to rename the incident based on all of the information you’ve gathered throughout response, update severity, provide a new summary and address any follow-ups. The new name and summary will be included in the opportunity created in Jeli, as well as updated in the broadcast channels in Slack. Changing the name of the incident will not change the name of the incident channel created in Slack.

We will also let you know you’re closing out an unmitigated incident, and give you the option to instead change the stage of the incident to mitigated, if you’d like to do so.

Closing the incident will then ends Jeli’s IR bot’s involvement in the incident channel, and creates an opportunity in Jeli for when you’re ready to begin your incident review. We will then update the channel with a final status indicating that the incident is closed and provide a link to the Jeli opportunity.

The broadcast channels will be updated as well, moving the incident stage to closed, setting an incident closed time, and linking to the Jeli opportunity.

Aliases: /jeli close-incident, /jeli end, /jeli end-incident

Did this answer your question?