diff --git a/modules/coo-incident-detection-using.adoc b/modules/coo-incident-detection-using.adoc
index cf34dbd0c37f..e21951b83496 100644
--- a/modules/coo-incident-detection-using.adoc
+++ b/modules/coo-incident-detection-using.adoc
@@ -13,10 +13,21 @@
 * You have installed the {coo-full}.
 * You have installed the {coo-full} monitoring UI plugin with incident detection enabled.
 
+[NOTE]
+====
+If you have installed the {coo-full} programmatically, make sure that the namespace (by default `openshift-cluster-observability-operator`) has the label `openshift.io/cluster-monitoring=true`. If not add it by running the comand:
+
+[source,terminal]
+----
+$ oc label namespace openshift-cluster-observability-operator openshift.io/cluster-monitoring=true 
+----
+
+====
+
 
 .Procedure
 
-. In the Administrator perspective of the web console, click on *Observe* -> *Incidents*.
+. In the Administrator perspective of the web console, click on *Observe* -> *Alerting* and choose the **Incidents** tab.
 
 . The Incidents Timeline UI shows the grouping of alerts into *incidents*. The color coding of the lines in the graph corresponds to the severity of the incident. By default, a seven day timeline is presented.
 +
@@ -24,7 +35,11 @@ image::coo-incidents-timeline-weekly.png[Weekly incidents timeline]
 +
 [NOTE]
 ====
-It will take at least 10 minutes to process the correlations and to see the timeline, after you enable incident detection.
+It will take at least five minutes to process the correlations and to see the timeline, after you enable incident detection.
+
+Status changes are recorded at five-minute intervals. You can see the last update time next to the timeline. 
+
+Zoom in to a 1-day view by clicking on the drop-down to specify the duration.
 
 The analysis and grouping into incidents is performed only for alerts that are firing after you have enabled this feature. Alerts that have been resolved before feature enablement are not included.
 ====
@@ -32,6 +47,11 @@ The analysis and grouping into incidents is performed only for alerts that are f
 . Zoom in to a 1-day view by clicking on the drop-down to specify the duration.
 +
 image::coo-incidents-timeline-daily.png[Daily incidents timeline]
++
+[NOTE]
+====
+For performance reasons, the UI only loads the displayed data. The start time reflects the first data point rendered in the current timeline, not the absolute start time of the alert. For example, if you zoom to 1-day and an alert started two days ago, the start time will be shifted to twenty four hours before.
+====
 
 . By clicking on an incident, you can see the timeline of alerts that are part of that incident, in the Alerts Timeline UI.
 +
@@ -47,12 +67,3 @@ image::coo-incident-alerts-components-expanded.png[Incidents expanded components
 
 . Click the link for a firing alert, to see detailed information about that alert.
 
-
-
-[NOTE]
-====
-**Known issues**
-
-* Depending on the order of the timeline bars, the tooltip might overlap and hide the underlying bar. You can still click the bar and select the incident or alert.
-
-====
\ No newline at end of file