Incident timeline example with uncertain onset and two mitigations
Work through a four-to-ten-minute detection range and record separate mitigation attempts.
Illustrative dataset · Tool version 2 · Reviewed September 29, 2026
What can the timestamps actually establish?
The illustrative observations bound onset between 10:00 and 10:06 UTC. Discovery at 10:10 therefore gives a detection range of 4–10 minutes. Exact onset stays blank. One mitigation attempt at 10:18 produces no observed recovery; a second at 10:22 precedes recovery checks completing at 10:30.
| Interval | Minutes |
|---|---|
| Detection | Unknown |
| Acknowledgment | 2 |
| Detection to investigation | 4 |
| Investigation to recovery | 16 |
| Total impact | Unknown |
What this example does not establish
The bounds are supplied observations, not a statistical confidence interval. Chronology does not prove that a mitigation caused recovery.
Try a variation
Open the example, change one input, and review the result. Keep definitions and denominators constant when comparing scenarios. Save a named draft before changing to a different dataset.
Read the related guide · Source and further reading
These datasets and worksheets may be adapted for your team or training. Attribute AIOpsSRE and link to this example when redistributing. Third-party sources retain their own terms.
Get AIOpsSRE by email · Report a calculation or explanation issue