Workflow Automation

Workflows turn an event — an alert firing, a root cause identified, a threshold crossed — into an automated sequence of actions: notify, enrich, create a ticket, run a remediation, or call an external system.

Anatomy of a workflow#

Every workflow has a trigger, optional conditions, and one or more actions.

trigger:  alert.fired
when:     severity == critical AND tag.env == prod
do:
  - enrich:  attach ArcIn root-cause
  - ticket:  servicenow.create(priority=P1)
  - notify:  slack(#incidents)
  - runbook: restart-unhealthy-pods   # optional

Enrichment#

Before notifying a human, workflows can attach ArcIn's root-cause analysis, recent deploys, and the affected blast radius — so the first message already contains the answer, not just the symptom.

Guardrails#

Add approval steps, rate limits, and time windows so automation stays safe. A workflow that runs a remediation can require a one-click human approval outside business hours while running automatically during the day.