Incident creation via email