Skip to main content
TRACK A·OPERATE·Verified June 2026 · Lua 5.4 · ox_lib 3.x
Learning with an AI assistant?
Copies this lesson plus 2026 ground rules (no lua54 'yes', Cfx.re Portal, correct callback signatures) as a ready-to-paste mentor prompt.
Module A3 · Operate & secure

Incident log runbook

When something breaks, the worst response is panic edits on the live server. This runbook turns chaos into a routine. You capture the evidence, reproduce it, classify it, fix or escalate, and write it down so the same fire does not start twice. It pairs your txAdmin logs with your Discord reports into one workflow.

You'll build
A repeatable routine for turning a vague 'server broke' report into a logged, reproducible, fixable incident.
Time
~20 minutes.
You need
txAdmin access and a Discord channel for reports.
You'll learn
Capture -> reproduce -> classify -> fix or escalate -> record, so problems stop recurring
BEFORE YOU START

The runbook

Capture before you change anything

You have the error text, time, and who/what triggered it.

Grab the exact console error. Note the timestamp. Note the player or resource involved. Note what they were doing.

A screenshot of the report plus the matching console line is enough. Do not start editing yet.

Reproduce it

You can make the problem happen on demand.

Try to trigger it yourself on a test server, or at a quiet time. A bug you can reproduce is a bug you can fix. A bug you cannot reproduce gets a watch entry, not a guess-fix.

Classify the severity

You know whether to fix now or schedule it.

Sort it into one of three buckets: critical (server down, money or items exploitable), major (a core feature broken), or minor (cosmetic, rare). Critical jumps the queue. Minor goes on the list.

Fix or escalate, then deploy safely

The fix reaches the server through your normal deploy loop.

If the resource is yours, fix it on your PC, test it, and deploy with the Git loop. If it is a paid resource, open a support ticket with your captured evidence. Never patch directly on the live server.

Record the incident

A future you can find what happened and what fixed it.

Log one line per incident: date, symptom, cause, fix, and the resource or commit involved. A commit is the unique ID Git gives each saved change (see the Git lesson), so "commit a1b2c3d" lets a future you jump straight to the exact code that fixed it.

Over time this log becomes the fastest debugging tool you own.

code
2026-06-12 | shop dupe on rapid-click | client trusted for grant | added server cooldown + qty check | commit a1b2c3d

Keep reading the full lesson

Sign in to start, then unlock every step of this lesson and the full FiveM School with a membership.

Still ahead in this lesson
  • How it works
  • If something went wrong
  • What you can do now
  • Try it yourself

The remainder of Incident log runbook is available to FiveM School members.