Skip to content

Incidents

Incident reopening

Incident reopening is returning a resolved incident to an active state when failure returns.

What is incident reopening?

Incident reopening describes returning a resolved incident to an active state when failure returns. In reliability work, the label is useful only when it maps to a measurable check, a clear owner, and a next action when expectations break. Without that operational meaning, the phrase becomes decoration in dashboards and status updates.

Why it matters

Incident reopening matters because teams need a precise shared meaning for returning a resolved incident to an active state when failure returns. Vague language turns incidents into arguments about words instead of fixes.

When everyone uses the same definition, alerts, status updates, and post-incident reviews stay aligned.

How it works

In practice, returning a resolved incident to an active state when failure returns shows up as a concrete signal you can measure or communicate. Operators define what good looks like, watch for deviations, and record what happened when expectations break.

The useful version of incident reopening is operational: it changes who gets notified, what customers see, or which metric a team reviews after an incident.

Practical example

Imagine a team operating around checkout fails again twenty minutes after resolve. When observed behavior stops matching the definition of incident reopening, the team treats that change as a reliability event with a clear owner and next step.

Common misconception

Reopening always means a brand-new incident

That reading usually collapses distinct ideas into one slogan. Keep incident reopening tied to observable behavior so the definition stays useful under pressure.

How Fajita handles this

Reopening preserves context when a fix did not hold. Watch for flapping patterns.

Was this definition clear?