Auto-Triage Production Incidents to Linear and Slack
Turn a raw Sentry or PagerDuty alert into a tracked Linear issue and a communicated Slack incident thread with the on-call engineer assigned.
Production alerts arrive as noise: a Sentry error spike, a PagerDuty page, a raw message in #alerts. This agent turns that signal into a tracked, owned, communicated incident in one pass. It pulls the surrounding context, computes a stable dedupe key so a re-fire never creates a second issue, classifies severity against your matrix, resolves the on-call owner, and assembles both a Linear issue and a Slack incident thread in memory. Nothing is filed or posted until you approve the priority, the owner, and the message.
How it runs
Multi-agent orchestration — here's the flow, step by step.
Capture the alert exactly as it arrived — Sentry/PagerDuty/Datadog payload or Slack channel history — with every field's source URL retained.
messaging scannerCompute and persist the stable dedupe key, check it against memory and Linear for an existing issue, and run the recipient suppression gate before any staging.
workflow orchestratorPull occurrence trend, environment, deploy marker, stack trace, and Slack human context — dropping any fact the payload cannot source.
support scannerCategorize the incident type and route the owning service or component via the service map.
ticket classifierAssign a priority from the severity matrix, justified by the specific signals (environment, event rate, affected surface).
triage routerCross-reference against recent incidents to flag net-new vs. recurrence vs. regression, and merge alerts that share a root cause.
data analystResolve the on-call owner from rotation memory, corroborate against PagerDuty, propose the assignee + escalation path, and skip suppressed owners.
task routerResolve the on-call engineer's real Slack user for a tappable @-mention and confirm the target incident channel.
slack channel operations agentCompose the staged Linear issue draft — title convention, priority, labels, and a Summary/Impact/Timeline/Cause/Sources body from sourced facts only.
report formatterDraft the structured Slack incident thread — severity header, status block, and a calm what-we-know / what-we're-checking split.
internal comms writerDraft the on-call owner @-mention that accompanies the thread.
message writerPresent the full staged package for approval, then execute in order — Linear issue, splice its URL into the thread, post to Slack, page the owner, update the dedupe map — resuming cleanly on partial failure.
distributorRequired Agents
12- messaging-scanner
- workflow-orchestrator
- support-scanner
- ticket-classifier
- triage-router
- data-analyst
- task-router
- slack-channel-operations-agent
- report-formatter
- internal-comms-writer
- message-writer
- distributor
Connections
Required
Optional
What it does
- Ingests Sentry, PagerDuty, Datadog, or Slack-channel alerts with every fact sourced
- Stable dedupe key persisted before any write — a re-fire updates, never duplicates
- Severity classification against your own priority matrix with justified rationale
- Recurrence and regression detection against prior incidents
- On-call resolution from rotation memory, corroborated live against PagerDuty
- Structured Slack incident thread + threaded on-call @-mention
- Suppression gate excludes on-leave engineers and do-not-post channels
- Nothing filed or posted until you approve the staged package
Example prompt
Sentry just fired a spike of 500s on the checkout service in prod — file a Linear issue with the right priority, post an incident thread in #incidents, and page whoever's on call.
Ready to deploy Auto-Triage Production Incidents to Linear and Slack?
Start free. One click, full agent orchestration.
Get Started Free →