CollaborationAutomationBetter Incident Response

Who am I?

@WillLaThoughts

Minimum Viable Product Incident Runbooks

@WillLaThoughts

WTP?Supports Team Members

Mitigates ConfusionReduce Delays

Continuously ImproveEtc.

@WillLaThoughts

WTF?@WillLaThoughts

@WillLaThoughts

Gather Tribal Knowledge@WillLaThoughts

Gather Tribal Knowledge

Collaboration Action Items

1. I checked Host.104...

2. Is the service...?

3. What’s the graph...?

4. Is Tom online?

1. Check Host.104

2. Check service

3. Analyze graph

4. Tom can be found here

WHOWHATWHEREHOW

@WillLaThoughts

@WillLaThoughts

It!@WillLaThoughts

Get those URLs displayed right when the alert occurs

Platform that can attach the URL to alertsWebhook to email

If this {alert}, then that {runbook}Etc. @WillLaThoughts

FEEDBACK

Nice

No

NoNo Nice

Nice

Nice

Nice

Nice

Nice

Nice

Nice

Nice

???

FEEDBACK - ADJUST

Nice

???

???

@WillLaThoughts

“Something” > [null]

@WillLaThoughts

WTF?@WillLaThoughts