MTTR Service-Specific Triage Decision Tree Prompt
Build a deterministic, branch-by-symptom triage decision tree for one named service so any responder reaches the right hypothesis and runbook in minutes, removing the open-ended 'where do I even start' delay.
- Target user
- On-call engineers and service owners
- Difficulty
- Intermediate
- Tools
- Claude, ChatGPT
The prompt
You are a senior SRE who builds triage decision trees that get a responder from "an alert fired" to "I know what to check next" without guesswork. You produce an advisory artifact only — no changes are executed. I will provide: - The service name, architecture, and upstream/downstream dependencies - Its key dashboards, alerts, and the signals available (metrics, logs, traces) - The 5-10 most common or highest-impact failure modes and how each presents - Existing runbooks and their links Your job: 1. **Pick the root branch** — choose the first observable signal that best splits the failure space (usually the firing alert or top user-facing symptom). 2. **Build the tree** — for each branch, write a yes/no or multi-way question answerable from one named query/dashboard in under 60 seconds, branching toward a likely cause. 3. **Terminate at action** — every leaf must end at either a specific runbook link, a clear hypothesis with the next diagnostic command, or an explicit escalation target. 4. **Encode dependency checks early** — put "is an upstream dependency degraded?" near the top so responders rule out external causes before deep local digging. 5. **Add confidence + exit ramps** — mark where the tree is uncertain and tell the responder when to stop following it and page a service expert. 6. **Keep it shallow** — favor depth of 3-4 decisions to any leaf; flag any path that requires more. Output as: (a) the decision tree in indented/Mermaid form, (b) the exact query or dashboard for each decision node, (c) the runbook/escalation mapped to each leaf, (d) a list of assumptions to verify with the service owner. Keep every diagnostic step read-only; never include a mutating command in a triage node.
Run this prompt with AI
Test it, get an AI-improved version, or compare models — live in the Prompt Workspace. No copy-paste.
Related prompts
-
Alert Triage Decision-Tree Builder Prompt
Turn a noisy alert stream into a deterministic, branching triage decision tree that any on-call engineer can follow to classify, route, and act on alerts in under a minute.
-
First-5-Minutes Triage Prompt
From the alert alone, decide severity, estimate blast radius, and route to the right owner in the opening minutes — so the incident lands with the people who can fix it instead of bouncing, cutting time-to-triage.
-
Alert Correlation Prompt: Collapse a Storm Into One Incident
Take a flood of simultaneous alerts and group them into a single incident with one probable originating cause, so responders triage one signal instead of fifty — cutting the time lost sorting noise from the real failure.
-
Dependency Health-Sweep Prompt: Is It Us or Upstream?
Run a fast structured sweep of a failing service's upstream and downstream dependencies to answer 'is the problem ours or theirs?' in the first minutes — so responders stop debugging their own code when a database, provider, or downstream is the real fault.
More Reduce MTTR with AI prompts & error guides
Browse every Reduce MTTR with AI prompt and troubleshooting guide in one place.
Reading prompts? Get all 500 in one free PDF
500 battle-tested, copy-paste AI prompts engineered by a senior systems engineer — every one with fill-in placeholders and safety/back-out notes. Drop your email and it's yours.
- 500 prompts: Linux · Kubernetes · Terraform · OpenStack · GitLab · Docker · Monitoring · Incident Response
- Instant PDF download — yours free, forever
- Plus one practical AI-workflow email a week (no spam)
Single opt-in · unsubscribe anytime · no spam.