Similar incidents

Splunk On-Call leverages natural language processing to look up similar incidents. The Similar Incidents tab displays active and past incidents.

Active incidents

Active incidents show potentially related incidents that may currently be occurring. By looking up active similar incidents, responders can coordinate a response against the same problem and diagnose if there are parallel streams of response.

Past incidents

By looking up past incidents, responders can find insights from previously resolved incidents that may be related. Incident chats, responders, and annotations may help derive context from past solutions to fix current problems faster. Results are stack-ranked by similar payload fields, and then by date if similarity is equal.

You can expect to see similar previous incidents within minutes in the Similar Incidents tab of the incident in question.