Kaspersky Next XDR Expert

Deleting incident types

If you want to delete an incident type that is used in a playbook, you have to delete this incident type from the playbook trigger and/or algorithm to avoid errors.

You cannot delete an incident type in the following cases:

• An incident type is set as default in the tenant where this incident type was created.

  When trying to delete this incident type, you are prompted to set a new default incident type. In the window that opens, you have to select the incident type from the list.

• An incident type is set as default in a child tenant.
• The current tenant or a child tenant contains an incident with the type that you want to delete.

  Before deleting such a type, you have to assign another type to the incident.

To delete the incident type:

1. In the main menu, go to Settings → Tenants.
2. Click the name of the required tenant.

   The tenant's properties window opens.

3. On Settings, click Incident management.

   The Types tab is displayed with the incident types table.

4. Do one of the following:
   • Select the incident type that you want to delete, and then click Delete.
   • Click the name of the incident type that you want to delete, and then in the Edit incident type window, click Delete.
5. In the confirmation dialog box, click Delete.

The incident type is deleted.