restore incident creation