Starting an investigation
Type your question or paste an incident description directly into the input. Traversal parses the text for entities (teams, services) and extracts the date and time if present.Pasting incident descriptions
You can paste a snippet from a ticket, Slack thread, or alert directly. Traversal will extract the relevant entities and time window automatically. Time formats that parse well:Oct 23 20:00 UTC10/23/2024 at 20:00 UTCOct 23 4pm ET 20245pm EST yesterday
Writing effective descriptions
Better descriptions produce better results. Include:- When the issue started
- Error messages you’re seeing
- Affected teams or services
- Links to relevant alerts or runbooks
What Traversal returns
Each investigation returns a root cause analysis (RCA) with the following:Root cause summary
A summary statement with a confidence level and supporting evidence.
Evidence citations
Clickable citations including metrics anomalies, log lines, deployments, code diffs, and topology relationships.
Timeline
A sequence showing when symptoms began, anomalies were detected, deployments occurred, and dependent services started failing.
Recommended next steps
Diagnostic suggestions, remediation steps, runbook-style guidance, and suggested team escalations.
Confidence levels
| Level | Meaning |
|---|---|
| High | Strong correlation patterns with consistent evidence across multiple signals. |
| Medium | Theory is plausible and likely, but missing full visibility or traces. |
| Low | Weak or partial signals. Requires human confirmation. |
Traversal’s recommended next steps are suggestions, not actions. Traversal will not make changes to your system without your permission.
Asking follow-up questions
You can continue an investigation by asking follow-up questions in the web app or in the Slack thread for that investigation. Examples:- Drill into a specific symptom
- Slice the timeline to a narrower window
- Request more detail on a particular signal
To change the analysis time window, start a new investigation with the revised time range rather than asking as a follow-up.