Add journal entries to Incident Case elements

The journal allows you to record your observations and comments about administrator actions during the incident investigation.

Adding journal entries is especially useful when more than one administrator is investigating the same incident simultaneously. Journal entries are automatically marked with a time stamp. Once a journal entry is added, it cannot be removed, which provides an audit for incident management (for example, to be used as evidence in court).

  For more details about the product and how to configure features, click Help or press F1.


Type the journal entry in the Additional Comment field and click Commit.
The journal entry is added to the list.