Draft Incident Report
draft_incident_reportCreate a review-first incident report and postmortem draft from persisted observations for a specified host. Configure the time window and observation limit to control the review scope.
Instructions
Create a review-first incident report and postmortem draft from persisted observations
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| host | Yes | ||
| hours | No | ||
| limit | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| host | Yes | ||
| status | Yes | ||
| window | Yes | ||
| timeline | Yes | ||
| postmortem | Yes | ||
| remediation | Yes | ||
| completeness | Yes | ||
| generated_at | Yes | ||
| invalid_rows | Yes | ||
| sample_count | Yes | ||
| impact_signals | Yes | ||
| review_required | Yes | ||
| executive_summary | Yes | ||
| detection_evidence | Yes |