Very often the causes of an incident aren't visible in metrics because the relevant metrics aren't collected. Sometimes an incident is caused by external actors, etc...
Yes but IME it is never possible to collect everything. It's part of the job to deduce the missing parts from what we have available.
Yes but IME it is never possible to collect everything. It's part of the job to deduce the missing parts from what we have available.