Edwin AI Incidents Page

Last updated - 17 December, 2025

The Incidents page in your Edwin AI portal provides a centralized workspace for identifying, filtering, and reviewing system-generated incidents. This unified view consolidates both Insights and Singleton incidents into a single experience, helping teams investigate issues. All components on this page update dynamically based on the incident selected in the list.

The Incidents page is made up of the following visual components that work together to help you view, understand, and respond to AI-detected issues:

• Incidents list panel—Displays all detected incidents with filtering and sorting options.
  
  Key capabilities include the following:

Filter	Description	Additional details
Severity Filters	Enables you to refine the incident list based on impact level. You can select one or multiple severities to focus on the most relevant categories.	Available severity filters include the following: Critical—Indicates a severe, time-sensitive issue that may require immediate action.Major—Represents a significant problem that could escalate if left unaddressed.Minor—Used for lower-priority issues or informational events that do not require urgent intervention.Warning—Highlights emerging or transitional conditions that may warrant monitoring.
Date Filter	Enables you to specify a custom time window using range settings based on the “First Timestamp” of incidents. Helps narrow investigations to a specific timeframe.	The following occurs when a range is selected: Only incidents that occurred within the specified start and end dates display in the list Severity and search filters continue to apply within that timeframe
Search Capability	Provides enhanced filtering across available incident attributes. Supports full-text and partial-match queries across Insights and Singleton incidents.	Examples of searchable fields include the following: Incident name, CI or Causal CI, Object, Incident ID, and Tenant (if available).

• Incident detail panel—Displays in-depth information about a selected incident, including context, impact, and recommended actions.
  
  Key capabilities include the following: 

Capability	Applies To	Description
Overview	Alerts & Insights	Provides a high-level summary of the incident, including severity, first-seen timestamp, affected resource, and relevant classification details. Establishes the foundation for deeper investigation.
Enrichments	Alerts	Displays supplemental information added through automated analysis, integrations, or contextual tags (for example, environment data or metadata from external systems).
Events and Insights	Insights	Highlights notable occurrences related to the incident, such as threshold breaches, anomaly detections, dependency events, or correlated alerts. Provides deeper visibility into what led to the incident and how it unfolded over time.
Alerts, Events, Merged Insights	Alerts	Highlights notable occurrences related to the incident, such as threshold breaches, anomaly detections, dependency events, or correlated alerts. Provides deeper visibility into what led to the incident and how it unfolded over time.
Correlation Details	Insights	Explains why the alert was generated and how it relates to other system events. For Insights, outlines related alerts, temporal patterns, or rules that contributed to the Insight.
Actions	Alerts & Insights	Includes the following interactive controls for triage and investigation: • Assign to Me—Take ownership of the incident. • Close Alert (or Insight)—Resolve or dismiss the incident; removes it from active workflows. • AI Agent—Opens a new browser tab with AI-powered analysis tools. • Pin—Keep the incident visible while navigating other parts of the platform.

Viewing and Taking Action for an Edwin AI Incident

1. In LogicMonitor, navigate to Edwin AI > Select Incidents from the navigation bar. 
   
2. Locate and select the Incident you want to investigate. 
   Use severity filters, date filters, or search to narrow the list as needed. 
3. Review the incident details. 
   Examine the Overview, Enrichments, Events and Alerts and Insights, and Correlation Details to understand the incident’s impact and root cause.
4. To take an action on the Incident, select one of the following:
   • To take ownership of the incident for investigation or resolution, select Assign to Me. 
   • To mark the incident as resolved or no longer actionable, select Close Alert or Close Insight. 
   • To open AI-powered analysis tools in a new tab for automated assistance, select AI Agent. 
   • To keep the incident accessible while navigating other parts of the platform, select Pin.