Signal intake
Inbounds validate webhooks or mailbox messages, normalize severity, resource, tags, body, and source URLs, then create or update a thread.
AI incident triage turns an incoming signal into an evidence-backed starting point: what is affected, which owner or agent should respond, what changed recently, and which checks are worth running first. It is strongest when inbounds, alert noise reduction, SKG, and connections are configured together.

What this page covers
Normalize incoming alerts from monitoring, ITSM, email, webhook, chat, and voice entry points before work reaches responders.
Use alert grouping and dedupe windows so repeated symptoms do not create unnecessary RCA turns.
Route the right thread to the right assigned agent with enough context to form hypotheses and request approvals.
Operational detail
AI incident triage turns an incoming signal into an evidence-backed starting point: what is affected, which owner or agent should respond, what changed recently, and which checks are worth running first. It is strongest when inbounds, alert noise reduction, SKG, and connections are configured together.
Inbounds validate webhooks or mailbox messages, normalize severity, resource, tags, body, and source URLs, then create or update a thread.
The agent summarizes symptoms, timestamps, blast radius clues, likely service ownership, missing evidence, and immediate diagnostic steps.
Thread task lists, summaries, and source-event history preserve why an alert was investigated, grouped, or recorded only.
Related pages