thanks for the reply. not sure have looked into the screenshot which i attached. when i right click the desired incident the Enable incident is not coming.. also i noticed the file name have zzz prefix. what
The 'zzz' means that you have a downtime set against that incident rule. The Downtimes are visible by ticking on details in the View drop down in the top right. So it maybe that rather than it being disabled it is in a permanent downtime.