← Back to skills
Debugging & Incident TriageMedium ReliabilityModerate-Risk Workflow

Incident Timeline Builder

Normalizes and orders incident events from logs/alerts/changes into timeline artifacts for debugging and post-incident review.

Version

0.1.0

Last Updated

Apr 22, 2026

Verification Type

reconciliation checks, manual review required

Downloads

0

Required inputs

  • incident_events (json)

    Timestamped event records from relevant systems.

Expected outputs

  • incident_timeline (markdown)

    Chronological incident narrative.

  • incident_timeline_json (json)

    Machine-readable ordered timeline.

Included checks and assets

  • scripts/build_timeline.py (script)

    Parses and sorts timestamped events into deterministic timeline order.

  • references/event-schema.md (reference)

    Schema for timeline event input records.

  • references/timeline-quality-checks.md (reference)

    Quality checks for complete, reviewable incident timelines.

Failure modes

  • Timezone parsing errors can reorder events.
  • Incomplete event feeds reduce timeline trustworthiness.
  • Unlabeled events increase interpretation ambiguity.

Ideal use cases

  • Incident retrospectives
  • Root-cause chronology reconstruction
  • On-call handoff summaries

Example runs

Checkout incident timeline

Validated sample run

Converts mixed alert and log records into ordered chronology.

Input preview

events.json

Output preview

Ordered timeline with deploy/error/mitigation checkpoints

Changelog summary

  • 0.1.0 · Apr 22, 2026

    Initial release for incident timeline generation.

Links

Inspect the source, read authored documentation, or download the published skill bundle.