Hello, I'm looking for the table in which the breach time is stored even after an incident is resolved or closed. Once the incident gets resolved or closed the breach time field contains a null value. I need to be able to report on the last breach time value prior to the ticket closure but can't find any table in SLQ that would store this info. Anyone know which table that info may be stored in? Thanks in advance.
Edit forgot to mention: I do see a possible solution in joining the lc_response_level table and the related incident guid; In turn using the lc_turnaround_time + im_create_date to calculate the breach time. Just thinking there has to better solution than this.