Manually create an incident
Sometimes we need to trigger an incident manually, to then "pull" events into it - not all incidents are automatically created by an alert.
It would be great to have the ability to manually create an incident and "add" / "remove" notable events by hand / by query (as well as events from other non-Azure data sources)
Igal Shapira commented
You can create an incident manually by first creating a bookmark, on any event you find notable in Log Analytics results page.
Once bookmark is created, it can be promoted to an incident.
Jordan Cheal commented
Could you not use the Create Alert function within "Logs"? I have had to do this to create an incident for 2 raw log events in order to assign an incident ID and log actions against them. I set the parameters in the query to point to the 2 events.