Guide

Incident replay

Build a post-mortem timeline of what happened in your community with a single command.

1

Build a report

Run n!incident <timeframe> [title] in your server, for example n!incident 2h raid from #general. You can also generate a report from the Incidents page in the dashboard. Use n!incidents to list your stored reports.

2

What the timeline captures

The report merges member joins and leaves, bans and unbans, moderation cases, automod hits, message deletions and channel or role changes into one timestamped timeline. It also flags message spikes: channels that suddenly move far above their normal rate.

3

Activity retention

Reports are built from the last 14 days of recorded activity. Older events can no longer be replayed, so generate a report soon after an incident if you want the full picture.

4

The Incidents pages

Every report is a stored snapshot with a shareable dashboard link. The report page shows summary stats, headline actors and spike channels, plus the full timeline you can filter by event kind.