> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Update Incident

Updates a Forcepoint DLP incident.

## Parameters

| Parameter | Description |
| - | - |
| Action Type | The action to be performed on the incidents. |
| Action Value | Additional value per action type: - STATUS: One of NEW, IN\_PROCESS, CLOSE, FALSE\_POSITIVE, ESCALATED or a custom status. - SEVERITY: One of HIGH, MEDIUM or LOW. - ASSIGN\_TO: The admin name which will be assigned. - TAG: The name of the tag (maximum 100 characters). - FALSE\_POSITIVE: either 1 (ignore) or 0 (include). |
| Comment | A comment for the performed action. Supported only for the following action types: - ADD\_COMMENT - ASSIGN\_TO - TAG - RELEASE (not supported for DISCOVERY incident type) - FALSE\_POSITIVE |
| Incident ID | The ID of the incident to be updated. |
| Incident Type | The incident type. |

## Workflow Library Example

[Update Incident with Forcepoint Dlp and Send Results Via Email](https://library.blinkops.com/workflows/update-incident-with-forcepoint-dlp-and-send-results-via-email)

![Workflow Library](https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max\&auto=format\&n=ojHYuDeYX5FWuN8a\&q=85\&s=b8af968e71438a9499c3223c9bd29fb2)

Preview this Workflow on desktop

[https://library.blinkops.com/workflows/update-incident-with-forcepoint-dlp-and-send-results-via-email/canvas](https://library.blinkops.com/workflows/update-incident-with-forcepoint-dlp-and-send-results-via-email/canvas)