Loading…
Probable cause postman
7 checklist items are still open, by role:
Leave the name empty to hand the role back to the commander.
Owns the incident and every role nobody else holds.
Confirm the severity and write the impact in Current status
Set the next status update time
Works the system: diagnosis and mitigation.
Check recent changes (open CHGs, Flux reconciles) on the affected components
Open the runbook for each firing alert
Keeps people outside the response informed.
Post the all-clear
Tracks follow-ups, handoffs and the longer view.
Note follow-up work as it comes up
Confirm the affected SLIs have been normal for 30 minutes
Decide whether this incident needs a postmortem
Apply the runbook's quick mitigation and post the result as an update
Record each mitigation as a decision, with when to revert it
Verify the fix on the dashboard and that the alerts have cleared
Revert temporary mitigations, or schedule the revert