Incident Management

    AI root-cause analysis

    For every incident Lemwatch correlates recent deploys, DNS diffs, cert changes, and upstream provider status pages to pinpoint the likely cause.

    Updated 2026-07-10
    1 min read
    ai
    root-cause
    rca

    Quick answer#

    We cross-reference the incident timestamp with your last deploy, DNS diff, cert change, and upstream cloud provider status pages, then rank the top 3 causes by likelihood.

    Signals correlated#

  1. Git deploy webhooks (if wired)
  2. DNS record diffs
  3. SSL cert renewal / rotation events
  4. Cloudflare / AWS / GCP status pages
  5. WordPress plugin/theme version changes
  6. Autopilot actions in the same window
  7. Where to find it in Lemwatch#

    Incident detail → Likely cause. Each candidate has an evidence link.

    How to fix#

  8. Read the top-ranked cause and its evidence.
  9. If wrong, click "Not this" — the model learns per-org over time.
  10. When confirmed, click "Add to postmortem" to seed the incident report.
  11. FAQ#

    What if it can't find a cause?#

    You'll see "No correlated changes in the last 60 minutes" — start with outage triage.

    Does it access my server logs?#

    No — it uses only signals Lemwatch already collects.

  12. AI incident summaries
  13. DNS change detection
  14. Outage triage and diagnostics
  15. Was this article helpful?