Skip to content

Incidents

False negative

False negative is a real failure that monitoring failed to detect.

What is false negative?

False negative describes a real failure that monitoring failed to detect. In reliability work, the label is useful only when it maps to a measurable check, a clear owner, and a next action when expectations break. Without that operational meaning, the phrase becomes decoration in dashboards and status updates.

Why it matters

False negative matters because teams need a precise shared meaning for a real failure that monitoring failed to detect. Vague language turns incidents into arguments about words instead of fixes.

When everyone uses the same definition, alerts, status updates, and post-incident reviews stay aligned.

How it works

In practice, a real failure that monitoring failed to detect shows up as a concrete signal you can measure or communicate. Operators define what good looks like, watch for deviations, and record what happened when expectations break.

The useful version of false negative is operational: it changes who gets notified, what customers see, or which metric a team reviews after an incident.

Practical example

Imagine a team operating around checkout broken while /health still returned 200. When observed behavior stops matching the definition of false negative, the team treats that change as a reliability event with a clear owner and next step.

Common misconception

False negatives only happen with bad alert channels

That reading usually collapses distinct ideas into one slogan. Keep false negative tied to observable behavior so the definition stays useful under pressure.

How Fajita handles this

Monitor real customer paths, not only shallow health endpoints, to reduce false negatives.

Was this definition clear?