Yes, we already has the inbound action with type forward and email properties is fine .
When a user sent a mail to helpdesk, and that mail is forwarded to instance email id, incident is not creating.
But for the same email user replied means incident is creating. What might be the problem?.
