Skip to main content

Respond

Manage Sources

The Source field, when creating incidents, helps to specify the source of the incident. Categorizing sources is essential in the incident management process to understand the extent of the potential damage an incident might cause. Some examples of sources are SIEM, CTIX, Email, Chat Bot, Notification, Anti-Virus Software, Agencies, Logs, and more.

Before you Start

Ensure you have Create/Update permission for Sources.

Add Source

To add a source, follow these steps:

  1. Go to Admin Panel > Settings > Source.

  2. Click Add Source.

  3. Enter the following details:

    • Source Name: Enter a name for the source.

    • Source Type: Search and select a source type from the list.

  4. Click Add.

Supported Activities for Sources

You can perform the following activities to manage sources:

  • Search for a source using the search bar.

  • Edit an existing source's details. Hover over the location you want to delete, click the More Actions icon, and select Edit

  • Delete sources that are no longer required. You can only delete sources that are not associated with any other modules. Hover over the location you want to delete, click the More Actions icon, and select Delete.

    Note

    This option is available in Respond v3.4.8 (EA) onwards.

  • View activity logs to track the updates in sources. You can also search or filter activity logs by Action, Creation date, and User.

  • Export activity logs in PDF format.