Looks like by default the system uses Email as the source for auto generated incidents that come in from the email listener. Is there any way to change that source?
My manager wants to make a clear distinction from system generated and manually created incidents. Our service desk uses email as well when they get a direct email to them.
I know I can make a new source and have them use that, but the less work for them the better.