I think it would be really awesome if Orion had the ability to product incident reports based on the exact time an incident occurs.
Here is my (likely delusions of grandeur) vision of what this would look like...
A button for Incident Epicenter Report on a Node level view, once clicked I am presented with a form with the following options...
- Date/Time of Incident
- Range (both before and after specific incident date/time) in number of hours
- Which data-points I am interested in (check boxes in different categories)
- This would include options from modules such as APM components as well as UnDP's
- This would also include Syslog, Traps, and Events
- Percent Deviation from Standard for a time range
- Here you would input the specific time range in hours, days, weeks, months
After filling out this form a report, or a temporary one time Orion dashboard (with standard output to PDF option) is generated with all of the data-points you selected (in graph form for performance data) ranging both before and after the specified incident time in a number of hours selected as the Range. For each performance data-point it would indicate what the percentage of deviation from standard based on your selected time range for the Percent Deviation from Standard and if it was higher or lower.
I hope others can picture what I am attempting to explain. Any questions, improvements, or comments of any type are welcome!