{"slug": "postmortem-evidence-pack", "title": "Postmortem Evidence Pack", "summary": "SigNoz announced a new AI-powered feature that compiles postmortem evidence packs from alerts, metrics, logs, and traces via an MCP server integration, enabling engineers to reconstruct incident timelines with a single query. The tool automatically generates alert timelines, root cause signatures, quantified impact, and representative traces to streamline incident analysis.", "body_md": "The incident is resolved. Now comes the harder part: preparing the evidence for the postmortem.\n\nInstead of manually jumping between dashboards, logs, traces, and alerts, ask your AI assistant, connected to SigNoz through the MCP server, to compile the full evidence pack.\n\nPrerequisites\n\n- Connect your AI assistant to SigNoz using the\n[MCP Server guide](https://signoz.io/docs/ai/signoz-mcp-server/). - Make sure your services are instrumented with distributed tracing. See\n[Instrument Your Application](https://signoz.io/docs/instrumentation/)if you haven't set this up.\n\nCompile the Incident Timeline\n\nAsk your AI assistant to compile a complete evidence pack for the incident window:\n\n```\nCompile an incident timeline for yesterday 14:00-16:00 UTC: alert transitions, metric inflection points, representative errors, and the trace that best captures the failure path.\n```\n\nYour assistant will analyze alert history, metrics, logs, and traces to build a comprehensive timeline.\n\nThis evidence pack gives you everything you need for the postmortem: precise timing of alert transitions, correlated metric changes, the error pattern with selector criteria, and a representative trace showing the full failure path.\n\nFinal Summary\n\nInstead of manually reconstructing the incident from scattered alerts, dashboards, and trace searches, you asked your AI assistant for a complete evidence pack. In one query, you received:\n\n**Alert timeline**: 9 payment flaps, 10 checkout flaps, correlated within minutes** Root cause signature**: Payment rejection for`app.loyalty.level=gold`\n\nusers only**Quantified impact**: 30-41 checkout errors during peak buckets, P99 latency climbing from 2.8s → 4.3s** Representative trace**: Full span tree showing the exact failure path from payment → checkout → frontend\n\nYou now have everything needed for the postmortem doc to share with the team.\n\nUnder the Hood\n\n[Under the Hood](#under-the-hood)\n\nDuring this workflow, the MCP server called these tools:\n\n| Step | MCP Tool | What It Did |\n|---|---|---|\n| 1 | `signoz_get_alert_history` | Fetched alert state transitions during the incident window |\n| 1 | `signoz_query_metrics` | Identified metric inflection points (error rate, latency, saturation) |\n| 1 | `signoz_search_logs` | Retrieved representative error log events from the incident window |\n| 1 | `signoz_search_traces` | Searched for anomalous traces during the failure period |\n| 1 | `signoz_get_trace_details` | Fetched full span breakdown for the trace that best captures the failure path |\n\nRelated Use Cases\n\n[Alert Correlation Analysis](https://signoz.io/docs/ai/use-cases/alert-correlation-analysis/)- When multiple services alert simultaneously, identify whether it's a cascade from one failure or separate incidents.[On-Call Handoff Brief](https://signoz.io/docs/ai/use-cases/oncall-handoff-brief/)- Generate a handoff summary of recent incidents and ongoing issues for the next on-call engineer.[Error Rate Spike Explainer](https://signoz.io/docs/ai/use-cases/error-rate-spike-explainer/)- Investigate where errors originate in the call chain when a single service starts failing.\n\nIf you need help with the steps in this topic, please reach out to us on [SigNoz Community Slack](https://signoz.io/slack/). If you are a SigNoz Cloud user, please use in product chat support located at the bottom right corner of your SigNoz instance or contact us at [cloud-support@signoz.io](mailto:cloud-support@signoz.io).", "url": "https://wpnews.pro/news/postmortem-evidence-pack", "canonical_source": "https://signoz.io/docs/ai/use-cases/postmortem-evidence-pack", "published_at": "2026-06-27 00:00:00+00:00", "updated_at": "2026-06-28 10:35:49.301199+00:00", "lang": "en", "topics": ["ai-tools", "developer-tools"], "entities": ["SigNoz", "MCP Server"], "alternates": {"html": "https://wpnews.pro/news/postmortem-evidence-pack", "markdown": "https://wpnews.pro/news/postmortem-evidence-pack.md", "text": "https://wpnews.pro/news/postmortem-evidence-pack.txt", "jsonld": "https://wpnews.pro/news/postmortem-evidence-pack.jsonld"}}