To automate incident creation of alerts in the Respond interface, create
ESA Rules
Respond Rules
Incident Rules
Reporting Rules
Submit