When a monitor detects a variation that's out-of-bounds, it logs an incident. Each incident is specific to one monitor, and has a start time, a severity, a direction, a duration, and a status. When a monitor logs an incident, you can analyze the incident to determine its cause so you can address it in your production data.

When you want to work with incidents as opposed to analyzing a specific one, you have several options:

• The Incidents list is a central place to work with all the incidents in the workspace. You can review all of an incident's details by selecting its ID in the Incidents list.
• The Incident dashboard provides summary information about a workspace's incidents, and links to the Incidents list so you can drill down.
• The Explorer tree gives you a 7 day window into incidents on a metric. If a metric has incidents, they'll appear in Explorer and clicking on the Incidents button will take you to a page focused on incidents on that metric in the 7 day window. You can change the window to expand it, and from the list, you can select any incident to analyze it.

The Incidents list

With a workspace selected, select Incidents on the top bar to open the Incidents list.

• Tiles across the top display summary information about incidents in the workspace
• Just above the list items, controls let you work with the list.
• You can click the ID of an incident to open it, and you can click the name of a metric to edit the metric or view it in Explorer.
• The check boxes on the far left allow you to use bulk operations to change the status of multiple incidents, or validate multiple incidents.

The Incident dashboard

For an overview of a workspace's incidents, on the Dashboards tab select Incident.

On the left, tiles indicate the number of incidents with various statuses. If the number isn't zero, the tile is also a filtered link to the Incidents list. Select a tile to open the Incidents list and display items with the indicated status. Note that Resolved is actually a validation status, so the filters have some overlap (e.g., an incident can be Submitted and Resolved at the same time).

On the right, you can specify a date range at the top, and review the following charts:

• Incidents plots the count of incidents over time.
• Incidents by incident status also shows counts over time, but as stacked bars (one per incident status). Select a status in the legend at the bottom of the chart to toggle the corresponding bars on or off. For example, if all statuses are displayed and you want to hide unviewed incidents, select Unviewed in the legend— select it again to unhide them.
• Resolved incidents plots the count of resolved incidents over time. For information about resolving incidents, see validate an incident fix.
• Incidents by severity shows counts of incidents over time as stacked bars (one per severity). Select a severity in the legend at the bottom of the chart to toggle the corresponding bars on or off.