Understanding incidents, alerts, and recovery

When monitoring detects a condition that satisfies the configured incident rules, SW Monitor can create or update an incident. Alerting can then notify the appropriate contacts or channels according to configuration.

When authoritative checks confirm that the service has recovered, the incident can move through recovery handling and retain the history for later review.

A single failed network request does not always mean a sustained outage. Confirmation and recovery logic are intended to reduce false incident transitions.