e-volv

Observability playbook

AlerttoTicketEnrichment

Turns a raw alert into an actionable ticket with a hypothesis, owning code, suspect deploys, and prior occurrences.

Takes a raw observability alert — fired manually by an operator or by webhook — and turns it into an actionable ticket before a human reads it. Parses the alert for service, metric, and threshold; clones the service repository; locates the code that emits or governs the alerting condition; retrieves recent deploys and commits touching that path; checks whether the same alert has fired before and what resolved it; and files a ticket that opens with a hypothesis rather than a metric name.

Identifier
alert-to-ticket-enrichment
Version
1.0.1
Steps
4
Triggers
1
  • alert
  • observability
  • ticket
  • enrichment
  • incident
  • on-call

When it runs

Manualmanual.fire

The pipeline

The graph below is the one the workflow opens with in the builder — same steps, same layout, drawn on the same canvas. The run playing through it is a simulation; the branches and conditions are real.

React Flow
  1. 01
    Manual Alert Firedtrigger

    The event that starts the run.

  2. 02
    Clone Service Repository ⚠️ SET YOUR REPOgit.clone

    Shallow-clones the repository at the right ref.

  3. 03
    Enrich Alert into Ticketagent.run

    One agent works the task with its toolkit.

  4. 04
    Create Enriched Ticketticket.create

    Opens a ticket on the connected tracker.

The agent

Alert Enrichment Agent

Base type
Senior Developer
Temperature
0.2
Max iterations
35
Tools
7

Tickets · 2

  • list_ticketsList Tickets · read
  • create_ticketCreate Ticket · write

Filesystem · 1

  • read_fileRead File · read

Code search · 1

  • code_searchCode Search · read

Terminal · 1

  • run_terminal_cmdRun Terminal Command · write

Memory · 1

  • memory_readRead Memory · read

Status · 1

  • update_statusUpdate Status · write