Automatic incident grouping and reopening
Correlate monitor failures into grouped incidents.
Automatic monitor failures are correlated by monitor taxonomy:
- Monitors with a folder or environment share a group only when both values match exactly.
- Monitors without either classification keep independent per-monitor groups.
An active group has one incident with a historical list of every affected monitor. A new member adds a timeline update instead of creating a second incident. The incident severity may escalate as higher-severity members join, but never decreases while active. When one member recovers, a timeline update is added; the incident resolves only when every affected monitor that is still enabled is no longer down. Heartbeat recovery follows the same rule.
Automatic reopening
When a monitor group fails again within 24 hours of automatic recovery, Status reopens the most recently resolved incident for that group rather than creating a disconnected incident. Reopening preserves the complete timeline and affected-monitor history, adds any new member, and retains the highest severity observed. A typed reopening event records the failed monitor and error.
Failures after the 24-hour boundary create a new incident.