Observability playbook
Alert to Ticket Enrichment
Turns a raw alert into an actionable ticket with a hypothesis, owning code, suspect deploys, and prior occurrences.
Takes a raw observability alert (fired manually by an operator or by webhook), and turns it into an actionable ticket before a human reads it. Parses the alert for service, metric, and threshold; clones the service repository; locates the code that emits or governs the alerting condition; retrieves recent deploys and commits touching that path; checks whether the same alert has fired before and what resolved it; and files a ticket that opens with a hypothesis rather than a metric name.
- Identifier
alert-to-ticket-enrichment- Version
- 1.0.1
- Steps
- 4
- Triggers
- 1
- alert
- observability
- ticket
- enrichment
- incident
- on-call
When it runs
manual.fireThe pipeline
The graph below is the one the workflow opens with in the builder, same steps, same layout, drawn on the same canvas. The run playing through it is a simulation; the branches and conditions are real.
- 01Manual Alert Fired
triggerThe event that starts the run.
- 02Clone Service Repository ⚠️ SET YOUR REPO
git.cloneShallow-clones the repository at the right ref.
- 03Enrich Alert into Ticket
agent.runOne agent works the task with its toolkit.
- 04Create Enriched Ticket
ticket.createOpens a ticket on the connected tracker.
The agent
Alert Enrichment Agent
- Base type
- Senior Developer
- Temperature
- 0.2
- Max iterations
- 35
- Tools
- 7
Tickets · 2
list_ticketsList Tickets · readcreate_ticketCreate Ticket · write
Filesystem · 1
read_fileRead File · read
Code search · 1
code_searchCode Search · read
Terminal · 1
run_terminal_cmdRun Terminal Command · write
Memory · 1
memory_readRead Memory · read
Status · 1
update_statusUpdate Status · write