<h2>Incident Management in Service Operations Workspace</h2><br/><div style="overflow-x:auto"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head><meta content="text/html; charset=UTF-8" /><meta name="copyright" content="(C) Copyright 2025" /><meta name="DC.rights.owner" content="(C) Copyright 2025" /><meta name="generator" content="DITA-OT" /><meta name="DC.type" content="concept" /><meta name="DC.title" content="Incident Management in Service Operations Workspace" /><meta name="abstract" content="You can create and manage your incidents in Service Operations Workspace." /><meta name="description" content="You can create and manage your incidents in Service Operations Workspace." /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/concept/use-sow.html" /><meta name="DC.relation" scheme="URI" content="../../../product/it-service-management/reference/r_ITServiceManagement.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/concept/sow-landing-page.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/task/add-quick-link.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/task/create-list-sow.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/concept/change-sow.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/concept/interaction-sow.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/concept/knowledge-articles-sow.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/concept/on-call-scheduling-in-sow.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/concept/problem-sow.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/concept/recommendation-framework-sow.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/concept/recommended-actions-for-itsm-in-service-operations-workspace.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/concept/request-sow.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/concept/msteams-sow.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/concept/slm-sow.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/concept/walkup-sow.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/concept/wfo-itsm-service-operations-workspace.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/concept/collaboration-sow.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/concept/configure-cti-sow.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/concept/configure-liveagent-sow.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/concept/using-ur-sow.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/concept/using-ut-sow.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/task/create-incident-sow.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/task/view-update-inc-overview-tab.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/concept/view-inc-record-info-contextual-sidepanel.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/task/work-on-incident-sow.html" /><meta name="DC.relation" scheme="URI" content="../../../product/service-operations-workspace/concept/mim-in-sow.html" /><meta name="DC.creator" content="ServiceNow" /><meta name="DC.date.created" content="2023-08-03" /><meta name="DC.date.modified" content="2024-02-01" /><meta name="DC.format" content="XHTML" /><meta name="DC.identifier" content="incident-sow" /><link rel="stylesheet" type="text/css" href="../../../CSS/commonltr.css" /><title>Incident Management in Service Operations Workspace</title></head><body id="incident-sow"> <div class="breadcrumb"><a class="link" href="../../../product/it-service-management/reference/r_ITServiceManagement.html" title="The IT Service Management (ITSM) solution provides scalable workflows to manage and deliver IT services to your users all through a single cloud-based platform.">IT Service Management</a> > <a class="link" href="../../../product/service-operations-workspace/concept/sow-landing-page.html" title="ServiceNow Service Operations Workspace is a configurable workspace that provides a unified experience for multiple IT Service Management and IT Operations Management workflows. Configure your agent experience using the easy-to-navigate interface of Service Operations Workspace for ITSM.">Service Operations Workspace for ITSM</a> > </div> <h1 class="title topictitle1" id="ariaid-title1"><span class="ph">Incident Management</span> in <span class="ph">Service Operations Workspace</span></h1> <div class="body conbody"><p class="shortdesc">You can create and manage your incidents in <span class="ph">Service Operations Workspace</span>.</p> <p class="p"><span>Introduction to incident management in Service Operations Workspace<img class="image" alt="Introduction to incident management in Service Operations Workspace" /></span> </p> <div class="p"><div class="fig fignone" id="incident-sow__fig_spj_34p_b5b"><span class="figcap"><span class="fig--title-label">Figure 1. </span>Tabs of an incident record page in <span class="ph">Service Operations Workspace</span></span> <img class="image" id="incident-sow__image_inh_ncy_kdc" src="../image/sow-incident-tabs-header-new.gif" alt="Tabs of an incident record" /> </div> </div> <div class="section" id="incident-sow__section_nmr_wsq_5sb"><h2 class="title sectiontitle">Overview tab</h2> <div class="p">This tab displays the following information about an incident:<ul class="ul" id="incident-sow__ul_swm_ptq_5sb"><li class="li">Summary</li><li class="li">Impact</li><li class="li">Cause</li><li class="li">Resolution</li></ul> </div> <p class="p">From the Compose section, you can add comments and work notes for the incident.</p> <p class="p">For more information on the fields displayed on the <span class="ph uicontrol">Overview</span> tab, see <a class="xref" href="../task/view-update-inc-overview-tab.html" title="View and update the incident information, such as summary, impact, cause, and resolution, from the Overview tab. This incident information helps you analyze the issue and resolve the incident quickly.">View and update incident information on the Overview tab</a>.</p> <p class="p">You can customize the display of the information on the <span class="ph uicontrol">Overview</span> tab. For more information, see <a class="xref" href="customize-the-incident-record-page.html#customize-overview-tab-incident-sow" title="Modify the Overview tab of an incident record page to display the summary and other information of the incident for an agent.">Customize the Overview tab for an incident</a>.</p> </div> <div class="section" id="incident-sow__section_fyn_kvn_b5b"><h2 class="title sectiontitle">Investigation tab</h2> <p class="p">This tab enables you to investigate any affected CIs with the <span class="keyword apiname">ci_computer</span> or <span class="keyword apiname">ci_server</span> class associated with the incidents. The tab displays the metrics information of the associated primary CI or any affected CI that is selected, which helps you to analyze and resolve the issue. You can use the various remedial actions on this tab to resolve the CI-related issues.</p> <p class="p">By default, the tab displays metrics information of the primary affected CI associated with the incident. But you can also select and view the information for any affected CI with the <span class="keyword apiname">ci_computer</span> or <span class="keyword apiname">ci_server</span> class that is associated with the incident. For information about how you can set up Investigation Framework, see <a class="xref" href="set-up-investigate.html" title="Set up the Investigation Framework in Service Operations Workspace to enable the display of the CI metrics information on the Investigation tab of the Incident records.">Setting up Investigation Framework in Service Operations Workspace</a>.</p> <div class="note"><span class="notetitle">Note:</span> <ul class="ul" id="incident-sow__ul_zkt_1l4_b5b"><li class="li">The tab is visible only if the Agent Client Collector (ACC) or Microsoft Endpoint Configuration Manager (MECM) adapters are installed and configured.</li><li class="li">The tab displays the metrics information for the CI only in the following conditions:<ul class="ul" id="incident-sow__ul_adx_wjp_b5b"><li class="li">Agent Client Collector or Microsoft Endpoint Configuration Manager (MECM) is installed for the associated CI. This helps to retrieve the metrics data for the CI.</li><li class="li">The associated CI class is a CMDB CI computer.</li></ul> </li><li class="li">This feature supports only the <span class="ph">macOS</span>, <span class="ph">Windows</span>, and <span class="ph">Linux</span> operating systems.</li></ul> </div> <p class="p">You can also customize the display of the metrics information on this tab. For more information, see <a class="xref" href="customize-the-incident-record-page.html#customize-investigate" title="Customize on how the CI related metrics information is displayed on the Investigate tab of the Incident record.">Customize the Investigate tab</a>.</p> <p class="p">For more information on the metrics displayed on this tab, see <a class="xref" href="../reference/features-of-investigation-tab.html" title="The Investigation tab displays CI metrics information along with various options. Use the options and the metrics information to view the data that helps to resolve the CI-related issues.">Features of the Investigation tab</a>.</p> </div> <div class="section" id="incident-sow__section_plt_3z4_1bc"><h2 class="title sectiontitle">Communicate tab</h2> <div class="p">This tab displays all the communication tasks and options that enable you to communicate with the stakeholders in the various phases of an incident. This tab is available only if any of the following conditions are met:<ul class="ul" id="incident-sow__ul_ohz_lz4_1bc"><li class="li">For a major incident - The <span class="ph">Major Incident Management</span> (sn-sow-mim) plugin is active and configured in <span class="ph">Admin Center</span>, for <span class="ph">Service Operations Workspace</span>. For more information, see <a class="xref" href="setup-mim-sow.html" title="Set up Major Incident Management (MIM) to manage major incidents from the incident record page in Service Operations Workspace. A major incident (MI) is an incident that results in significant disruption to the business and has a high business impact.">Setting up Major Incident Management in Service Operations Workspace</a>.</li><li class="li">For Incident – The <span class="ph">Task Communications Management</span> and <span class="ph">Incident Communications Management</span> applications are installed, active, and configured in the instance and you select the <span class="ph uicontrol">New Communication</span> option from the <span class="ph uicontrol">More Actions</span> (<img class="image icon" id="incident-sow__image_tjs_wz4_1bc" src="../image/mim-more-actions-top-icon.png" alt="More actions icon" />) icon of the Incident record page. For more information, see <a class="xref" href="../administer/task-communication-management/reference/tcm-landing-page.html" target="_blank" rel="noopener noreferrer">Task Communications Management</a> and <a class="xref" href="../../incident-alert-management/concept/c_IncidentAlertManagement.html" title="The ServiceNow Incident Communications Management application enables organizations to create and manage communications related to major business issues or incidents.">Incident Communications Management</a>.</li></ul> For more information on the features of the <span class="ph uicontrol">Communicate</span> tab, see <a class="xref" href="communicating-with-stakeholders-sow.html" title="Use the Communicate tab to create and manage all communications with stakeholders during the various phases of an incident or a major incident.">Communicating with stakeholders about incidents and major incidents</a>.</div> </div> <div class="section" id="incident-sow__section_ywz_kbp_1bc"><h2 class="title sectiontitle">Post incident report tab</h2> <div class="p">This tab enables you to generate, configure, publish, and export a post incident report for a major incident after it's resolved. The post incident report enables you to review the cause and resolution of the major incident and also identify potential process gaps. Based on this information, you can take preventive measures to avoid the issue in the future or to handle the major incident in a better way. This tab is available only if the following conditions are met:<ul class="ul" id="incident-sow__ul_lyb_sbp_1bc"><li class="li"><span class="ph">Major Incident Management</span> is active and configured in <span class="ph">Admin Center</span> for <span class="ph">Service Operations Workspace</span>. For more information, see <a class="xref" href="setup-mim-sow.html" title="Set up Major Incident Management (MIM) to manage major incidents from the incident record page in Service Operations Workspace. A major incident (MI) is an incident that results in significant disruption to the business and has a high business impact.">Setting up Major Incident Management in Service Operations Workspace</a>.</li><li class="li">The major incident is in the <span class="ph uicontrol">Resolved</span> state.</li></ul> For more information on the features of the <span class="ph uicontrol">Post incident report</span> tab, see <a class="xref" href="../task/review-update-pir-mim-sow.html" title="Review a post incident report (PIR) using the Post Incident Report tab. A PIR helps you review and understand the cause of the major incident and the actions taken by the teams to resolve the incident. This helps prevent the issue in the future.">Review and update a post incident report</a>.</div> </div> <div class="section" id="incident-sow__section_gn3_xsq_5sb"><h2 class="title sectiontitle">Details tab</h2> <p class="p">This tab displays detailed information about the incident. For example, the short description, assignment details, and related records. For more information on how you can configure fields in this tab, see <a class="xref" href="../task/configure-form-layout-task.html" title="Configure a task record form in Service Operations Workspace by modifying the form layout or related lists from the classic ServiceNow AI Platform user interface.">Configure a task record form in Service Operations Workspace</a>.</p> </div> <div class="section" id="incident-sow__section_hkf_ysq_5sb"><h2 class="title sectiontitle">Related records tab</h2> <p class="p">This tab provides a list view of the records associated with the incident. For example, task SLAs and affected CIs.</p> </div> <div class="section" id="incident-sow__section_dhl_ctq_5sb"><h2 class="title sectiontitle">Contextual side panel</h2> <p class="p">From this section, you can view record information and recommendations, collaborate using <span class="ph">Microsoft Teams</span>, and reach out to experts on-call to resolve incidents quickly.</p> <p class="p">For more information about <span class="ph">Incident Management</span>, see <a class="xref" href="../../incident-management/concept/c_IncidentManagement.html" title="Incident Management restores normal service operation while minimizing impact to business operations and maintaining quality.">Incident Management</a>.</p> </div> </div> <div class="related-links"> <ul class="ullinks"><li class="link ulchildlink"><strong><a href="../../../product/service-operations-workspace/task/create-incident-sow.html">Create an incident in Service Operations Workspace</a></strong><br /> Track the investigation, possible solutions, and resolution of a problem for a customer.</li><li class="link ulchildlink"><strong><a href="../../../product/service-operations-workspace/task/view-update-inc-overview-tab.html">View and update incident information on the Overview tab</a></strong><br /> View and update the incident information, such as summary, impact, cause, and resolution, from the <span class="ph uicontrol">Overview</span> tab. This incident information helps you analyze the issue and resolve the incident quickly.</li><li class="link ulchildlink"><strong><a href="../../../product/service-operations-workspace/concept/view-inc-record-info-contextual-sidepanel.html">Viewing incident record information using the Contextual side panel</a></strong><br /> View the incident record information, such as caller details and assets, from the Contextual side panel. Use this information to help manage an incident more efficiently.</li><li class="link ulchildlink"><strong><a href="../../../product/service-operations-workspace/task/work-on-incident-sow.html">Work on an incident in Service Operations Workspace</a></strong><br /> If resolving the incident involves creating a problem, change, service request, and so on, you can create them directly from the incident record.</li><li class="link ulchildlink"><strong><a href="../../../product/service-operations-workspace/concept/mim-in-sow.html">Major Incident Management in Service Operations Workspace</a></strong><br /> Create and manage major incidents in <span class="ph">Service Operations Workspace</span>.</li></ul> <div class="familylinks"> <div class="parentlink"><strong>Parent Topic:</strong> <a class="link" href="../../../product/service-operations-workspace/concept/use-sow.html" title="Service Operations Workspace provides a unified experience for multiple IT Service Management workflows by integrating with various applications.">Using Service Operations Workspace for ITSM</a></div> </div> <div class="linklist relinfo relconcepts"><strong>Related concepts</strong><br /> <ul class="linklist"><li class="linklist"><a class="link" href="../../../product/service-operations-workspace/concept/change-sow.html" title="When a change to your infrastructure or a business service is required, you can create a change request and track it in Service Operations Workspace.">Change Management in Service Operations Workspace</a></li><li class="linklist"><a class="link" href="../../../product/service-operations-workspace/concept/interaction-sow.html" title="Interactions are a centralized location for all communication channels in Service Operations Workspace. You can respond to an incoming chat, phone, walk-up, or messaging interactions faster.">Interaction Management in Service Operations Workspace</a></li><li class="linklist"><a class="link" href="../../../product/service-operations-workspace/concept/knowledge-articles-sow.html" title="Knowledge articles provide agents with information such as self-help, troubleshooting, and task resolution.">Knowledge Management in Service Operations Workspace</a></li><li class="linklist"><a class="link" href="../../../product/service-operations-workspace/concept/on-call-scheduling-in-sow.html" title="Use On-Call Scheduling in Service Operations Workspace to view and manage your shifts and schedules.">On-Call Scheduling in Service Operations Workspace</a></li><li class="linklist"><a class="link" href="../../../product/service-operations-workspace/concept/problem-sow.html" title="When you have recurring incidents or a major incident, you can create a problem to identify the root cause of the incidents and help prevent them from happening again.">Problem Management in Service Operations Workspace</a></li><li class="linklist"><a class="link" href="../../../product/service-operations-workspace/concept/recommendation-framework-sow.html" title="An agent can view dynamic and contextual recommendations and perform a relevant action.">Recommendation Framework in Service Operations Workspace</a></li><li class="linklist"><a class="link" href="../../../product/service-operations-workspace/concept/recommended-actions-for-itsm-in-service-operations-workspace.html" title="Get guidance-based or field-level recommendations for incident forms in Service Operations Workspace.">Recommended Actions for ITSM in Service Operations Workspace</a></li><li class="linklist"><a class="link" href="../../../product/service-operations-workspace/concept/request-sow.html" title="Service Operations Workspace for Request Management integrates the platform functionality for tier 1 agents into a multi-tab interface that helps agents efficiently manage multiple incidents, catalog requests, and catalog tasks.">Request Management in Service Operations Workspace</a></li><li class="linklist"><a class="link" href="../../../product/service-operations-workspace/concept/msteams-sow.html" title="You can create a connected experience for users in Service Operations Workspace through ServiceNow integrations with Microsoft Teams.">ServiceNow integrations with Microsoft Teams in Service Operations Workspace</a></li><li class="linklist"><a class="link" href="../../../product/service-operations-workspace/concept/slm-sow.html" title="You can access the service level agreement (SLA) information for an incident on the Service Operations Workspace landing page and incident record page.">Service Level Management in Service Operations Workspace</a></li><li class="linklist"><a class="link" href="../../../product/service-operations-workspace/concept/walkup-sow.html" title="Manage your Walk-up interactions and queues in Service Operations Workspace.">Walk-up Experience management in Service Operations Workspace</a></li><li class="linklist"><a class="link" href="../../../product/service-operations-workspace/concept/wfo-itsm-service-operations-workspace.html" title="Manage your schedule using Workforce Optimization for ITSM Scheduling in Service Operations Workspace. Use Coaching to review and complete assigned training.">Workforce Optimization for ITSM in the Service Operations Workspace</a></li><li class="linklist"><a class="link" href="../../../product/service-operations-workspace/concept/collaboration-sow.html" title="Collaboration services provide a way to communicate and collaborate in real time to resolve the incidents. You can initiate a chat or make conference calls using a service provider to communicate with stakeholders.">Collaboration in Service Operations Workspace</a></li><li class="linklist"><a class="link" href="../../../product/service-operations-workspace/concept/configure-cti-sow.html" title="Service Operations Workspace provides an agent (with the sn_openframe_user role) to receive inbound calls and place outbound calls using the Computer Telephony Integration (CTI) interface.">Computer Telephony Integration in Service Operations Workspace</a></li><li class="linklist"><a class="link" href="../../../product/service-operations-workspace/concept/configure-liveagent-sow.html" title="Service Operations Workspace enables agents to work on any incident created using Live Agent chat.">Live Agent chat in Service Operations Workspace</a></li><li class="linklist"><a class="link" href="../../../product/service-operations-workspace/concept/using-ur-sow.html" title="The Universal Request is a task that a requester creates from any of the sources that include: Agent Workspace, Service Operations Workspace, or using a Virtual Agent chat.">Using Universal Request in Service Operations Workspace</a></li><li class="linklist"><a class="link" href="../../../product/service-operations-workspace/concept/using-ut-sow.html" title="Agents can use the Universal Task application to create tasks for employees and to manage the request resolution.">Using Universal Task in Service Operations Workspace</a></li></ul></div> <div class="linklist relinfo reltasks"><strong>Related tasks</strong><br /> <ul class="linklist"><li class="linklist"><a class="link" href="../../../product/service-operations-workspace/task/add-quick-link.html" title="Refer to a URL quickly from the Service Operations Workspace landing page.">Add a user-specific quick link on the ITSM landing page</a></li><li class="linklist"><a class="link" href="../../../product/service-operations-workspace/task/create-list-sow.html" title="Create a list or use an existing list to create a list.">Create a list in Service Operations Workspace</a></li></ul></div> </div></body></html></div>