When a response runs

Incident kinds

Choose which incidents the response is for: Down or alert received, Slow response, SSL certificate expiring, or Domain expiring. Expiry reminders happen once, so they can only run "as soon as an incident opens".

Conditions

• An incident opens: as soon as it is confirmed.
• Still open after a time: for example after 30 minutes, and only if it is still open then. Perfect for escalation.
• Keeps happening: a monitor has several incidents within a period, for example 3 in 30 minutes. Good for flapping.

You can combine up to five conditions and choose whether any or all of them must be true.

Resolved

A response can instead run when an incident is resolved, for extra steps such as a webhook. The recovery notice itself is automatic.

Wait before running again

Set a pause, per monitor, so a response does not run over and over for the same trouble.