ESM Institute
← All free contentIncident Management

Logging Incidents for Action and Learning

ESMi Knowledge Team

· 3 min read

In brief

Log incidents so that each record captures enough structured and narrative information to restore service, communicate effectively and support later analysis. Incident management restores service quickly, and good records preserve the learning that problem management needs once stability returns.

  • Record the affected service and consumer, assigning an owner to maintain the information.
  • Capture symptoms and business impact. In the article's example, a record captures which business process stopped, enabling prioritisation and future trend analysis beyond a device-level symptom.
  • Log actions and timestamps, and keep facts, assumptions and diagnosis separate. Agree the input, output and acceptance criteria so the next participant can act without avoidable clarification.
  • Measure record completeness, rework for missing data and analysis usability as a set. Use completeness as the starting signal, but compare it with rework before deciding whether a change worked.
  • Avoid copying vague user language without clarification, recording only the final fix, and collecting fields that no one uses. Test the practice against a real service scenario before making it standard, and review results with delivery teams and affected consumers, because operational success and experienced value can diverge.

Continue reading on the Exchange

Join or sign in to read the complete article and explore the full knowledge library.

Founder membership is free for life

More from ESMi Knowledge Team

Available to members.

Related articles

More on Incident Management →