Explainable Summaries

Summaries describe what happened and why grouping occurred.

• What happened: Plain language description of the incident.
• Why alerts were grouped: Fingerprint matches, service alignment, and shared time windows.
• Probable causes: Ranked based on supporting signals.
• Recommendations: Concrete next steps.

Guidance

• Share summaries directly into Slack or tickets.
• Keep ownership set before handoff.
• Record follow-up actions in the notes attached to the incident.