You can selectively view all or some of the system and user actions performed on an active incident in the Latest activity section of the incident details pane in the Incident monitoring task.
Latest activity log for an incident
You can see the incident activity history in the Latest activity log. This includes details of when a Security Desk user enters a comment for a procedure step, completes a procedure step, takes or releases ownership of the incident, changes incident priority or state, and so on.
When multiple users work towards an incident resolution, all their actions are recorded and visible in the Latest activity log.
Filtering the Latest activity log
You can expand the Latest activity log by clicking on the header or
the 
next to the section heading.
To filter the view to display only selected information, click on the
Filter (
).
When view filters are applied to the Latest activity log, it its represented by the white filter icon.
