Investigation Examples

Real incidents investigated and resolved by Sherlocks AI

Each example below is a real production incident. Click any row to see the live investigation unfold, step by step, exactly as Sherlocks performed it, pulling metrics, correlating logs, ruling out noise, and landing on a root cause.

Recent Alerts
11 Critical9 Warning20 Total
11:52WarningPod Evicted from Node Ephemeral Storage Exhaustion: root cause analysisprod-india-exchange/landing-pageRealResolved
10:39CriticalOOMKilled on Kubernetes: how an unbounded KYC query exhausted a 2.5 GB container limitprod-india-exchange/support-dashboard-stagingRealResolved
10:19WarningECS task placement failure during AZ rebalance: a MemberOf constraint no service config showedprod-·-us-east-1/CADENCE-CLIENT-URL-SWAPPING-SERVICERealResolved
09:15WarningPostgres replica EBS throughput throttle: how a write burst became a VolumeIOPSExceeded alarmpostgresql-replica-·-ap-south-1/pg-slave-01RealResolved
07:59WarningElastiCache HPA Connection Burst: transient Redis connection fan-outredis-·-production/eaze-websocket-001RealResolved
06:22WarningCelery Memory Pressure from an Aurora PostgreSQL Load Surgeprod/moderation-chat-celeryRealResolved
04:19WarningCelery CrashLoopBackOff from an AMQP broker connection failure that self-healed before it was explainedprod/content-tagger-consumerRealResolved
07:17WarningElastiCache CurrConnections spike from a WebSocket reconnect and reject loopredis-·-production/eaze-websocket-001RealResolved
11:42Criticalorder-service disk full: an Ansible refactor silently dropped the logrotate configapp-server-02/order-serviceRealResolved
10:22Criticaluser-service HTTP 503: a missing index after a schema migration exhausted the connection pool3-node-vm-cluster/user-serviceRealResolved
03:14Criticalpayment-gateway OOM kill: a Hibernate session cache leak in a nightly batch jobprod-vm-03/payment-gatewayRealResolved
05:15CriticalPrometheus PVC Disk Growth: TSDB blocks under a 65-day retention windowmonitor-namespace/prometheusRealResolved
05:13CriticalCreateContainerConfigError: a missing Kubernetes Secret blocked container startupprod/analytics-workerRealResolved
14:32Critical503 Service Outage: a Kubernetes Deployment scaled to zero replicasprod/content-apiRealResolved
09:24WarningRDS WriteIOPS alarm: a false alarm from a daily batch job, not an incidentaurora-postgresql/content-writerRealResolved
11:05CriticalAPI Gateway Down Alert: a false positive from an APM Collector restartprod/api-gatewayRealResolved
14:42WarningKafka consumer lag: rollout churn, CPU throttling, and an HPA hard cap combined to stall recoveryprod/notification-consumerRealResolved
15:10CriticalCrashLoopBackOff: a release candidate image crashed ad-service before it could bind its portprod/ad-serviceRealResolved
23:30CriticalTrino CrashLoopBackOff from cluster resource pressure, not a bad imageanalytics/trino-coordinatorRealResolved
20:43CriticalTrino CrashLoopBackOff from a missing BigQuery connector JVM argumentanalytics/trino-coordinatorRealResolved