Operational investigation use cases
Merlin is being built around common investigation problems: understanding what happened, connecting related evidence and deciding what to inspect next.
Start with the operational question
Tools become useful when they fit the work engineers actually have to perform. Merlin’s use cases are therefore organised around investigation outcomes rather than around an abstract AI feature list.
Incident investigation focuses on reconstructing a sequence of events. Root cause analysis goes further by separating a likely initiating condition from downstream symptoms. Log correlation connects evidence across systems so neither activity is interpreted in isolation.
Use cases can overlap
A single incident may begin as a broad investigation, require cross-system correlation and end with an RCA. Keeping those activities in one evidence-led flow reduces the need to rebuild context each time the question changes.
Related Merlin topics
Turn operational noise into a clearer investigation.
Merlin is being built to help operations teams connect log evidence, operational signals and natural-language investigation in one workflow.