new incident detection algorithm

Previous search_incident method had a bug which caused incident from one service to overlap over each other.
I've modified  incident detection algorithm.