---
title: Investigate a run
description: Find one agent run in the web app, read what each step did, and see
  why it scored and alerted the way it did.
editUrl: true
head: []
template: doc
sidebar:
  hidden: false
  attrs: {}
pagefind: true
draft: false
---

When a run failed, raised an alert, or scored higher risk than you expected, you'll want to see exactly what the agent did. This guide takes you from the agent list to the span that explains it.

By the end you'll have the run open, know which steps it took and what each one received and returned, and know where its risk score, alerts, and quality verdicts came from.

## Before you start

- The agent is instrumented with a Prefactor SDK and has recorded at least one run. If it hasn't, start with the [Quickstart](/quickstart).
- You're signed in to the account the agent belongs to.

## Find the run

1. Go to **Agents**, select **View details** on the agent's card, then select the **History** tab (1).

   The [Agent page](/web-app/agent) opens. If the agent has a risk profile, the strip above the tabs shows how many of its runs fell into each risk level.

   ![The Agent page, showing the instance risk distribution and deployment snapshot above the tabs, with a marker on the History tab (1).](../../../assets/screenshots/guides/agent-page.png)

2. Find the run you're after and open it.

   Every run of this agent is listed, newest first. Use the **Status** (1), **Risk level** (2), and **Alerts** columns to spot the run. Failed and Terminated runs, High or Critical risk levels, and a non-zero alert count are the usual starting points. Then select **View** (3) on its row.

   ![The History tab listing runs newest first, with markers on the Status column (1), the Risk level column (2) and View on a Failed run (3).](../../../assets/screenshots/guides/agent-history-tab.png)

3. Check the run's status and risk score.

   The [Agent instance page](/web-app/agent-instance) opens on the **Activity** tab. The strip at the top shows the run's status, such as **Failed** (1), when it ran, and its **Risk score** (2). Test runs carry a **Smoke test** or **Eval** pill; live runs have none. Below the strip are a span activity chart and, when the run recorded LLM token usage, a cost breakdown.

   ![The top of the Agent instance page, with markers on the Failed status badge (1) and the Risk score of 47, rated Medium (2).](../../../assets/screenshots/guides/instance-header.png)

## Read what the agent did

4. Read the spans on the **Activity** tab, one card per step.

   If the agent uses a recognised integration, such as the Vercel AI SDK, LangChain, or the Claude SDK, the tab opens in **Conversation** view (1): user and assistant messages, tool calls and results, and LLM calls in order, newest first. Otherwise it shows the **Raw** span list. A failed step (2) is tinted red.

   ![The Activity tab in Conversation view, with markers on the View switch between Conversation and Raw (1) and a failed LLM call tinted red (2).](../../../assets/screenshots/guides/instance-activity-conversation.png)

5. Select a span to open its detail panel.

   The panel shows the span's status, risk level, duration, and timing, then its **Payload** (1), what the step received, and its **Result payload**, what it returned, each laid out as a tree. Use **Previous** and **Next** (2) to step through the run's spans without closing the panel.

   If the span holds values your integration marked as sensitive, they're redacted. Tick **Show sensitive information** to reveal them until you leave the tab.

   ![The span detail panel for a failed LLM call, with markers on the Payload section (1) and the Next button (2).](../../../assets/screenshots/guides/span-detail-panel.png)

6. Select the **Details** tab to see the run as a whole.

   You'll see when it started and finished, which agent version ran, and the input, result, and metadata recorded for the run, when your integration records them.

## Find out why it scored or alerted

7. Select the **Risk** tab to see where the risk score came from.

   The **Score composition** list (1) breaks the score down by span type: how many spans of each type ran, what share of the run's scored spans they were, and how many points they added. Open **How is risk calculated?** for the rules behind it. The tab only appears when the agent has a [risk profile](/platform/concepts/risk-profile).

   ![The Risk tab on an agent instance, with a marker on the Score composition list (1), which adds up each span type's points to the run's total score.](../../../assets/screenshots/guides/instance-risk-tab.png)

8. Select the **Alerts** tab to see what was raised on the run.

   Each alert shows its severity, when it was raised, and whether it's still **Active now**. Select an alert to see its payload and history.

9. Select the **Quality** tab to see evaluation results.

   Each quality schema and each [judge](/platform/evals) attached to the agent gets its own section, with the verdict and the explanation behind it.

If the run is still **Active** and you need it to stop, open the **⋮** menu at the right of the strip, choose **Terminate**, and give a reason. Termination can't be undone; see [Handle instance termination](/sdks/handling-termination) for how the agent finds out.

## If you can't find what you need

- **The History tab is empty.** The SDK hasn't recorded a run for this agent yet. Check the agent ID and API token the SDK is using; see [Configuration and environment variables](/sdks/configuration).
- **The run isn't in the list.** It may have run under a different agent. A deployment-scoped token supplies its own agent, so check which agent the token on the [Deployments tab](/web-app/agent/deployments) belongs to.
- **There's no Risk tab or Risk level column.** The agent has no risk profile assigned. Assign one from the [Risk page](/web-app/risk).
- **The Activity tab shows raw spans instead of a conversation.** The run's spans don't come from a recognised integration. The raw list holds the same spans; open each card to read it.
- **A payload shows a placeholder instead of a value.** The value was marked sensitive and either is redacted for your view or was discarded. See [Sensitive data](/platform/sensitive-data).

## Related

- [Instance](/platform/concepts/instance) — what a run is and the states it moves through.
- [Span](/platform/concepts/span) — what each step records.
- [Agent instance page](/web-app/agent-instance) — every field and tab on the run's page.
- [Agent page › History tab](/web-app/agent/history) — every column in the run list.
- [The audit trail](/platform/audit-trail) — what the connected record of a run contains.