Review performance, noise and postmortems

Start a shift with the Dashboard

1. Open Dashboard at the start of your shift.
2. Confirm you are shown as the current responder for your workspace.
3. Review any active or escalating incidents you are inheriting.
4. Check the flapping-alert information for anything likely to page you.

Dashboard also shows incidents created today, acknowledgement and resolution metrics, escalation timers and recent incidents, updating through the application's real-time event connection. Use Incidents for the complete list and full detail.

Review response performance

1. Open Reports.
2. Review total incidents, average MTTA and average MTTR.
3. Review escalated incidents and SLA breaches to see where escalation is doing a first responder's work.
4. Review missed alerts and recurring-incident information.
5. Compare against team benchmarks.

Find and fix a noisy alert

1. Open Noise dashboard and select the reporting window — 7, 14 or 30 days.
2. Review the noise score and signal-to-noise percentage.
3. Open Top noisy alerts and note the alerts with high volume and few actioned incidents.
4. Check Flapping alerts for checks that repeatedly change state.
5. Open Cloud Integration and review that metric's threshold, evaluation window and datapoints required to alarm.
6. Raise the threshold, lengthen the window, or lower the severity so it no longer pages a human, then deploy.
7. Re-check the next reporting window and confirm volume dropped.

Produce a postmortem

1. Open the incident in Reports.
2. Review the incident timeline, severity changes and progress updates.
3. Generate the postmortem draft from the incident record.
4. Add the root cause and any corrective actions.
5. Review the whole draft before circulating it.