Runbooks

Incident Management

Runbooks

How to write and retrieve runbooks in workspace memory.

Runbooks are reusable operational procedures stored in workspace memory.

Recommended Structure

Use this structure for runbook text:

Symptoms
First checks
Commands
Decision points
Resolution
Escalation

Save A Runbook

Use memory_upsert_runbook to save or update a runbook. The operation is idempotent when you provide a stable runbook_id.

Find A Runbook

Use memory_find_runbook with a problem description. Add service, tags, cluster, or namespace filters when they are known.

Scope

Runbooks saved through memory tools belong to the authenticated workspace. They are not included in public documentation search.

Creating Incidents

Create incidents from alerts, status changes, or responder actions.

Guides

Practical investigation patterns for IncidentFlow.