What problem does it solve? Raw log output is hard to turn into reliable incident evidence: entries may lack timestamps, versions, or correlation IDs, and investigations often rely on memory rather than reconstructed timelines. This Skill provides a structured method for assessing logging quality, triaging log data, correlating events across services, and producing evidence summaries for root-cause analysis. ## Core Features & Use Cases - Logging Quality Assessment: Checks whether log entries are timestamped, versioned, correlated, and free of secrets, turning gaps into corrective actions. - Triage and Correlation: Scopes time windows, filters by severity and component, and correlates events across services using shared identifiers and causality. - Evidence Production: Reconstructs event sequences and produces an evidence summary attached to the incident record. - Use Case: During an outage investigation, use this Skill to scope the incident time window, correlate events across microservices, and deliver a timeline-based evidence summary to the incident record. ## Quick Start Analyze the application logs from the last deployment window and produce a correlated event timeline and evidence summary for the open incident.
