SLA Breach Banner appearing on Major Incidents in SOW

[byronrivers]

Hi everyone, 

Currently, SLA's are not being used in my instance. All SLA definitions are set to inactive. However, when resolving a Major Incident in Security Operations Workspace, I see a "SLA Breached! Publish post incident report as soon as possible", related to publishing the post-incident report. I don’t get this behavior in the classic view.

New Major Incidents are also generating Task SLA records. Im trying to completely disable SLA processing since there is no need for it. 

Has anyone experienced this behavior or know what might still be triggering SLA creation or breach notifications?

Thanks in advance for any guidance.

[Mark Manders]

You are already giving the answer. "New Major Incidents are generating Task SLA records". That's the reason for the banner showing up and the breach notifications. 

Why are you even using Major Incident mgt if there is no need for SLA processing? If there is no need for SLAs, it doesn't matter when something gets resolved.