Incident Diagnosis & Root Cause Analysis via Observability Signals
Diagnose production incidents by correlating observability signals
What You Can Do
Systematically investigate production incidents by correlating metrics, logs, and distributed traces to pinpoint root causes. You provide Claude with observability data from your infrastructure, and it builds a timeline, identifies anomalies, tests hypotheses, and delivers a structured incident report with actionable remediation steps. This accelerates MTTR and prevents recurrence through data-driven diagnostics.
Features
Maps events across metrics, logs, and traces to establish precise temporal relationships
Identifies deviations in CPU, memory, latency, error rates correlated with incident onset
Maps affected service dependencies and determines blast radius from root cause
Systematically eliminates suspects by cross-referencing observability evidence
Prioritizes high-impact signals (resource utilization, error spikes, latency) by relevance
Groups firing alerts to identify common triggers and suppress noise
Suggests immediate mitigation actions and long-term fixes based on findings
Produces structured analysis with timeline, impact quantification, and prevention steps
Example Output
Timeline
- 14:23:47 UTC — Alert: API p95 latency jumped 3.2s → 18s
- 14:23:51 UTC — Database connection pool exhausted (150/150 active connections)
- 14:24:02 UTC — CPU on database host spiked 45% → 92%
- 14:24:15 UTC — Slow query log: full table scan on
userstable (missing index on email column)
Root Cause
New feature deploy introduced bulk email validation without indexing the email column, causing full table scans. This exhausted the database connection pool, cascading to the API layer and degrading all downstream services.
Remediation
- Immediate: Execute
CREATE INDEX idx_users_email ON users(email)— resolves blockage in <2 minutes - Long-term: Add database query review to CI/CD; add observability alert on slow query duration exceeding 500ms
Impact Customer-facing outage: 12 minutes affecting 8% of user logins. MTTR: 3 minutes (time to add index). Estimated revenue impact: $12K.
What's Included
- SKILL.md: Complete incident diagnosis workflow with multi-signal correlation logic
- Investigation checklist: Step-by-step process for systematically isolating root cause
- Timeline builder template: Structured format for mapping events across observability sources
- Hypothesis testing worksheet: Framework for validating and eliminating suspect components
- Remediation decision tree: Guide for prioritizing immediate mitigation vs. permanent fixes
- Query pattern library: Pre-built observability queries for Datadog, Prometheus, Splunk, and ELK
Who It's For
- Site Reliability Engineers (SREs) managing incident response and MTTR
- DevOps and platform engineers diagnosing infrastructure failures
- On-call engineers triaging P1/P2 incidents under time pressure
- Engineering managers analyzing recurring failure patterns
- Cloud architects investigating multi-service failure cascades
Best For
- P1/P2 incident diagnosis and MTTR reduction
- Production performance degradation investigation
- Error rate or latency spike root cause analysis
- Service failure diagnosis in multi-tier architectures
- Post-incident analysis and recurrence prevention planning
You might also like
Query your local Screenpipe instance to retrieve screen recordings, audio transcriptions, UI element accessibility trees, keyboard/mouse input logs, and productivity analytics. You can search by keywords, filter by content type (audio, OCR, accessibility, input), set time ranges, and extract structured data about your applications, meetings, and work sessions without sending data to external servers.
by az9713
You can submit architectural design documents, floor plans, and project parameters to receive a comprehensive compliance analysis that cross-references IBC, local amendments, zoning ordinances, and ADA accessibility requirements. Claude identifies specific gaps, cites applicable code sections, explains why each gap matters, and provides concrete remediation strategies—all before formal design review submission when corrections are costly and schedule-impacting.
by az9713
You can leverage Claude to synthesize regional seismic hazard data from authoritative sources (USGS maps, published studies), interpret probabilistic versus deterministic earthquake scenarios, and analyze how site conditions modify ground motions. Claude helps you justify seismic design parameters to clients and regulators, evaluate liquefaction and earthquake-induced landslide risks, and develop defensible recommendations aligned with ASCE 7 and current guidelines—accelerating report preparation without replacing specialized geotechnical software.
by az9713
You can compare building materials across embodied carbon, water usage, recyclability, supply chain impacts, and lifecycle costs—all grounded in industry standards like EN 15804 and ISO 14040/44. This skill transforms material selection from intuition-based guessing into data-driven specification, producing analysis outputs ready for client presentations, value engineering discussions, and regulatory compliance documentation.
by az9713
You systematically evaluate your internal developer platform across dimensions like onboarding, deployment, tooling, and documentation to identify quantifiable friction points. Claude analyzes your platform's usability, creates a friction scoring matrix, and generates a prioritized improvement roadmap ranked by team impact and implementation effort. You get a data-driven strategy to reduce developer toil and accelerate delivery.
by az9713
You can audit BIM models across five critical domains: geometric accuracy and LOD consistency, information requirements and metadata, coordinate systems and project setup, element naming and classification standards, and documentation completeness. This skill generates detailed compliance reports that identify every gap and provide specific remediation guidance, enabling you to enforce consistent standards across projects, reduce rework, and ensure models are ready for handoff to downstream disciplines or coordination workflows.
by az9713
You can conduct rigorous architectural design reviews that verify compliance with building codes, accessibility standards, energy regulations, and client requirements. The skill produces evidence-based, severity-ranked findings with specific remediation recommendations and regulatory citations, enabling you to identify issues before design phase submission or construction document preparation.
by az9713
You can accelerate HVAC design workflows by inputting building parameters—envelope characteristics, occupancy data, climate conditions, and existing systems—and receiving calculated heating/cooling loads, equipment sizing recommendations, and zone-by-zone analysis. Claude organizes complex building data into actionable design parameters and specification summaries for client review, permit submission, and professional validation against ASHRAE and ACCA standards.
by az9713