> ## Documentation Index
> Fetch the complete documentation index at: https://docs.incident.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Incident Lifecycle

Your incidents go through a lifecycle, for example:

Declared → Investigating → Fixing → Monitoring → Closed

You can customize the lifecycle of your incidents, to match your organization's process at [Settings > Respond > Lifecycle](https://app.incident.io/~/settings/lifecycle)

<img src="https://mintcdn.com/incidentio-18bb4170/HJXxJD3eY5_CVUex/images/help-centre/incident-lifecycle/screenshot-1.png?fit=max&auto=format&n=HJXxJD3eY5_CVUex&q=85&s=c7f6d3c47dadccb9cf5c598ef2a5d3eb" alt="" width="2932" height="1836" data-path="images/help-centre/incident-lifecycle/screenshot-1.png" />

There are three main stages of the incident lifecycle you can configure: **triage**, **active**, and **post-incident**.

You can also configure how **timestamps** are set when an incident moves between statuses.

***

## 1. Triage

You can learn more about triage incidents [here](/incidents/triaging). Incidents created [automatically from an alert](/incidents/auto-create) or via [our API](/integrations/api-overview) will start in triage. You can configure whether or not incidents created manually can go through triage [here](https://app.incident.io/~/settings/lifecycle).

***

## 2. Active

These statuses indicate the condition of your incident at a single point in time, while there's still ongoing impact and responders are working towards a resolution. The default statuses are: Investigating, Fixing, and Monitoring.

<img src="https://mintcdn.com/incidentio-18bb4170/HJXxJD3eY5_CVUex/images/help-centre/incident-lifecycle/screenshot-2.png?fit=max&auto=format&n=HJXxJD3eY5_CVUex&q=85&s=dd7be28afc841d96a30e5c7628dc3fa2" alt="" width="2746" height="1788" data-path="images/help-centre/incident-lifecycle/screenshot-2.png" />

## 3. Post-incident

Once the immediate impact is over, an incident can then enter a [post-incident flow](/post-incident/post-incident-flow), where you can define tasks for responders to complete now that there's time to reflect on what went wrong, and how to prevent it happening again.

Define your process in [Settings > Improve > Post-incident flow](https://app.incident.io/~/settings/post-incident-flow), and set the rules for which incidents should automatically enter the flow. Responders can always opt-in or opt-out of the flow.

<img src="https://mintcdn.com/incidentio-18bb4170/HJXxJD3eY5_CVUex/images/help-centre/incident-lifecycle/screenshot-3.png?fit=max&auto=format&n=HJXxJD3eY5_CVUex&q=85&s=05b3f9eddd4524cc5bef64682de08b08" alt="" width="2746" height="1788" data-path="images/help-centre/incident-lifecycle/screenshot-3.png" />

***

## 4. Timestamps and metrics

<img src="https://mintcdn.com/incidentio-18bb4170/HJXxJD3eY5_CVUex/images/help-centre/incident-lifecycle/screenshot-4.png?fit=max&auto=format&n=HJXxJD3eY5_CVUex&q=85&s=52e2df93c88a29bdf9f3db6a5ffa3b15" alt="" width="2746" height="1788" data-path="images/help-centre/incident-lifecycle/screenshot-4.png" />

**Timestamps** are a way to store structured data about your incidents. These are useful for reporting and analysis.

By default, there's a corresponding **timestamp** for each **status**. For example, "Fixed At" is set to the first time the incident changed to the "Monitoring" status.

**Timestamps** can be set in two ways:

1. **Manually** - set by a responder, [from the Incident Homepage](/incidents/edit-timeline)
2. **Automatically** - based on an incident status transition

Often, the impact will begin sometime before an incident is declared, so a good example of an additional timestamp could be "Impact Started At", which would be manually set by a human. So, if you wish to calculate the time to resolution for your incidents, it would be more accurate to measure from when the impact started, as opposed to when the incident was declared.

You can define **custom metrics** here too, as the difference between two timestamps:

<img src="https://mintcdn.com/incidentio-18bb4170/HJXxJD3eY5_CVUex/images/help-centre/incident-lifecycle/screenshot-5.png?fit=max&auto=format&n=HJXxJD3eY5_CVUex&q=85&s=c1caf7815c2f31010cc73bb5e1b14890" alt="" width="2746" height="1788" data-path="images/help-centre/incident-lifecycle/screenshot-5.png" />

These are available in the MTTX tab in [Insights](https://app.incident.io/~/insights).
