TDGDC ServiceDEMO CORPORATIONLive major incident: MI000001 · Microsoft 365 authentication failureelapsed 01:08:13

Alerts & on-call

3 correlation groups open · 412 raw alerts deduplicated into 3 in the last hour

Correlated alerts

  • CriticalAzure Monitor186 raw alertsAuthentication failures on Entra ID token endpointCI: Entra ID · service Single sign-onLinked to MI000001 — open the MI000001 war room
  • WarningSolarWinds14 raw alertsSQL-PAY-01 failover exceeded 600sCI: SQL-PAY-01 · service Payroll
  • WarningPrometheus212 raw alertsVPN-CONC-01 tunnel resets above thresholdCI: VPN-CONC-01 · service Remote access

On-call now

  • Sarah VanceIdentity · Today 08:00–20:00Primary
  • Dev PatelApplications · Today 08:00–20:00Primary
  • Lena OrtizNetwork · Today 08:00–20:00Secondary
  • Mike KellerService desk · This weekEscalation

Escalation policy

  1. 75% of SLAAssigned agent
  2. 90% of SLAGroup lead
  3. 100% — breachService desk manager
  4. 120%Service owner