Troubleshoot Incident Errors

Applies To: ThreatSync

Incident errors occur when ThreatSync could not perform a specified action, and include:

  • Device isolation failed
  • File deletion failed
  • Kill process failed

On the Incidents page, incidents with remediation errors show with a red exclamation point icon. To view details of the error, point to the icon.

Screen shot of a Device Isolation Failed hover text error on the Incidents page

To troubleshoot an incident error:

  1. Select Monitor > Threats > Incidents.
    The Incidents page opens.
  2. Click the incident with an error.
    The Incident Details page opens.
  3. In the Threat Details section, review the error message.

Screen shot of a remediation blocking error on the Incident Details page

  1. To try to remediate the incident again, click an action.

Related Topics

Monitor ThreatSync

Review Incident Details

Perform Actions on Incidents and Endpoints

Configure ThreatSync