Skip to main content
This guide covers day-to-day incident management. For conceptual background on how incidents work, see Incidents overview.

​
Viewing incidents

​
Dashboard

The Dashboard shows active incidents on the overview page with severity, affected monitor, duration, and affected regions. Click an incident to see its full timeline, check results, and update history.

​
CLI

# List active incidents
devhelm incidents list

# List resolved incidents
devhelm incidents list --status RESOLVED

# Get incident details
devhelm incidents get <incident-id>

# JSON output for scripting
devhelm incidents list -o json

​
API

# List incidents (paginated)
curl https://api.devhelm.io/api/v1/incidents \
  -H "Authorization: Bearer $DEVHELM_API_TOKEN"

# Filter by status
curl "https://api.devhelm.io/api/v1/incidents?status=CONFIRMED" \
  -H "Authorization: Bearer $DEVHELM_API_TOKEN"

​
Creating manual incidents

For issues that aren’t caught by automated monitoring: 
devhelm incidents create \
  --title "Database migration issue" \
  --severity DOWN

​
Resolving incidents

​
Automatic resolution

Most incidents resolve automatically when the monitor recovers. The recovery policy controls this:
  • The monitor must pass a configurable number of consecutive checks (default: 2)
  • A configurable number of regions must be passing (default: 2)
  • After resolution, a cooldown period prevents the same monitor from immediately re-opening a new incident (default: 5 minutes)

​
Manual resolution

devhelm incidents resolve <incident-id>

​
Updating incidents

Update severity or add context to an active incident: 
devhelm incidents update <incident-id> --severity DEGRADED

​
Incident timeline

Each incident tracks a timeline of events:
  • Created — initial detection with trigger rule and affected regions
  • Severity changed — escalation or de-escalation
  • Resolved — automatic recovery or manual resolution
  • Reopened — monitor failed again after resolution

​
Maintenance windows

Schedule maintenance to suppress alerts during planned downtime: 
# Create a maintenance window
devhelm maintenance-windows create \
  --name "Database upgrade" \
  --monitor-id <monitor-id> \
  --start "2026-04-15T02:00:00Z" \
  --end "2026-04-15T04:00:00Z"
During a maintenance window, incidents still record but notification policies are suppressed — your team won’t get paged.

​
Next steps

Alerting guide

Configure how your team gets notified about incidents.

Monitors guide

Fine-tune incident policies per monitor.