From the course: DevOps Foundations: Effective Postmortems

Unlock the full course today

Join today to access over 22,700 courses taught by industry experts or purchase this course individually.

Incident timelines

Incident timelines

From the course: DevOps Foundations: Effective Postmortems

Start my 1-month free trial

Incident timelines

- [Instructor] Now, let's get into the details of our incident with an incident timeline. This is constructed by bringing together all the sources you can. System logs, chat transcripts, ticket updates, individual recollections, monitoring graphs, anything that's available. Your goal is to assemble a minute by minute log of what happened. This will be your source of facts for your postmortem. So collect everything possible. The amount of time and detail you put into the timeline should be proportional to the severity of the event. Airline crash postmortems spend months on putting a timeline together. A routine tech company with a minor outage probably only merits an hour or two. I prefer to put the timeline into a collaboration tool, like a wiki, and ask all the participants to add their parts into it so that you can capture multiple viewpoints, and also have the actual postmortem meeting promptly. The longer you wait…

Contents