Skip to main content
Open DRE → Settings to control when DRE investigates and how it treats new evidence. These settings affect RCA behavior; they do not disable Pulse detection or Incident creation. The page is one scroll with a Behaviour group and, when your workspace has it, a Policies group. Runbooks are not here — they live on their own Runbooks page.

​
Re-investigation sensitivity

Choose how readily DRE starts a new investigation when an existing Incident receives more evidence:

​
DRE auto-investigates

Use the On Duty toggle to control automatic RCA.
  • On: eligible Pulse-created Incidents can start RCA automatically.
  • Off: Pulse continues to detect, correlate, and create Incidents, but analysis waits until a person clicks Investigate.
Turning On Duty back on applies to future routing decisions. Incidents created while it was off do not automatically form a backlog of RCA work. A person can always start RCA manually.

​
Default manual severity

Choose the initial severity for newly logged manual Incidents, from Critical, High, Medium, Low, or Info. The default is Medium. The person logging the Incident can change it before creation.

​
Policies

Some workspaces also show a Policies section. Policies control which proposed operational actions DRE can allow, pause for approval, or deny. If the section is not available, use the runbook effects and workspace approval controls exposed to your account.

Log an Incident

Create a manual Incident with the correct initial severity.

Review RCA

See when investigations start and how to read the result.

Manage runbooks

Control the effects of proposed mutating commands.

Manage integrations

Configure connections, Signals, and outcomes.