Investigate · artefacts

Evidence Viewer

Immutable artefacts for incident inc-4821 — pick a custom date/time window to review previous history, logs, and graphs.

Open RCA

Hash-verified stream

Select a time window, then an artefact. Focus (⌘\\) maximizes the reading canvas.

Read-only Agent OS

History window

Aug 2, 06:30 AM → Aug 2, 06:50 AM

Filters timeline, logs, and load graphs by time

From

Artefacts

6 in selected window

load-graph.json

integrity verifiedsha256:c4e91a…77b2

Captured Aug 2, 2026, 6:44:10 AM·2026-08-02T06:44:10.000Z

Incident inc-4821·Nordic Federated Bank · FS Core Banking Platform · production

Observability · load graph

Capture locus

1 resource

fs-prod-cs-tool2

worker

Application: host utilisation
Hostname: fs-prod-cs-tool2
IP address: 10.42.6.21
Cluster: fs-prod-k8s
Region: eu-north-1
Role: worker

Load graph · host utilisation vs PullImage errors · Aug 2, 06:30 AM → Aug 2, 06:50 AM

Raw series JSON

{
  "incident": "inc-4821",
  "node": "fs-prod-cs-tool2",
  "capturedAt": "2026-08-02T06:44:10.220Z",
  "window": { "from": "2026-08-02T06:30:00Z", "to": "2026-08-02T06:44:00Z" },
  "series": [
    { "t": "06:32", "cpu": 18, "mem": 46, "disk": 38, "pullErrors": 0 },
    { "t": "06:34", "cpu": 19, "mem": 47, "disk": 38, "pullErrors": 1 },
    { "t": "06:36", "cpu": 20, "mem": 47, "disk": 39, "pullErrors": 2 },
    { "t": "06:38", "cpu": 21, "mem": 48, "disk": 39, "pullErrors": 4 },
    { "t": "06:40", "cpu": 21, "mem": 48, "disk": 39, "pullErrors": 7 },
    { "t": "06:42", "cpu": 22, "mem": 49, "disk": 39, "pullErrors": 9 },
    { "t": "06:44", "cpu": 21, "mem": 48, "disk": 39, "pullErrors": 9 }
  ],
  "interpretation": "Host load flat; pull_image errors climb after 06:38 — not resource exhaustion."
}