certsocietegenerale / FIR

Fast Incident Response
GNU General Public License v3.0
1.73k stars 505 forks source link

Feature Request: Add an "Handler" field to each incident #92

Open trolldbois opened 8 years ago

trolldbois commented 8 years ago

The "Leader" Field is a team-designation attribute that is useful in multiple-team interactions. But intra-team, there is a need to clearly identify who is the human lead on an incident.

tomchop commented 8 years ago

Unfortunately this would add a layer of "complexity" to the tool that we'd like to avoid. We want to have as little fields as possible on every form in the tool.

That being said, we find that the "lead incident handler" of any incident can be determined more-or-less empirically by having a look at who posted the most comments. If that doesn't cut it, we could add a "most active IH" field on the top of the incident view that would be calculated at runtime when viewing an incident.