> ## Documentation Index
> Fetch the complete documentation index at: https://docs.energy.nayax.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Detection rules

**Detection rules** control when the platform opens an incident automatically. Each rule sets a threshold for a metric the platform watches. Without a matching rule, that automated detection does not run.

You manage detection rules in **Settings → Detection Rules**.

## What a rule contains

| Field         | What it does                                                                                                  |
| ------------- | ------------------------------------------------------------------------------------------------------------- |
| **Metric**    | The condition the rule watches.                                                                               |
| **Scope**     | Whether this is the **global default** or a **per-network override** (see below).                             |
| **Threshold** | The value that triggers detection.                                                                            |
| **Status**    | Whether the rule is **enabled** or **disabled**. Disabling turns the detection off without deleting the rule. |

A rule's metric and scope are fixed once created; to change them, delete the rule and add a new one. The threshold and enabled status can be edited at any time.

## Global defaults and your network's overrides

Detection rules come in two scopes:

* A **global default** applies to every network that does not have its own rule for that metric.
* A **per-network override** replaces the global default for your network, letting you tune a threshold to your fleet.

The list shows the global default first, then any overrides. As a network operator you manage your own network's overrides; add one when you want a metric to behave differently for your fleet than the global default does.

## Adding a rule

To add an override for your network, open **Settings → Detection Rules**, choose the metric, set the scope to your network, and set the threshold. Enable it to start detection, or leave it disabled to stage it. Deleting your override reverts the metric to the global default.

> Changing a detection rule affects incidents opened **after** the change. It does not reopen or reclassify incidents that were already detected.

Detection rules decide when incidents open; [SLA rules](/guides/incidents/settings/sla-rules) decide how quickly they must be resolved, and [auto-resolution](/guides/incidents/settings/auto-resolution) decides how they close when the condition clears.