You can view additional details and comments related to a ticket. The details are different depending on the type of ticket type. For example, Incident tickets have detailed incident report information, but Other tickets do not.

1. Sign in to the Arctic Wolf Unified Portal.
2. In the navigation menu, click Tickets & Alerts > All Tickets.
3. Find the ticket that you want to respond to.
   Tip: If needed, use filters to limit your results. See Tickets table filters for more information.
4. Click the Subject or Ticket # of the ticket.

   See View tickets for more information.

5. If the ticket was triaged by the Aurora Agentic SOC, scroll to the Investigation Timeline and click Flow on an AI triage entry to review the per-agent reasoning.

   Each entry in the Flow includes:

   • Agent Name: The role of the specialized AI agent (for example, Observation Agent or Identity Agent).
   • Verdict: The conclusion reached by the agent: Close, Alert, or Unable.
   • Confidence: The qualitative certainty of the agent's verdict (for example, High or Moderate).
   • Reasoning: A summary of the evidence and logic used to reach the verdict.

   Note: Agents labeled Skipped or Not executed (early exit) were bypassed because an earlier agent reached a high-confidence conclusion.

   Tip: To enable Flow, a user with administrator access must turn on the Agentic SOC toggle. See Admin settings.