What it owns
- Consolidates alerts and anomalies from the event workspace.
- Triages incoming incidents and labels them with severity and ownership.
- Surfaces a continuously updated event health view for operators.
Back to coworkers
Command Analyst
The Command Analyst is the coworker responsible for watching live event signals and turning them into ranked, attributable, operator-actionable activity inside the command center.
Where operators see it
- Command center incident queue
- Live event health overview
- Alerts and anomaly history
- Coworker activity log
Typical workflow
The Command Analyst pulls signals from across the workspace, ranks incidents by severity, and pushes a clean operator view into the command center. It does not unilaterally resolve incidents. It surfaces what is happening, what needs a human, and what has already been handled, with a full activity trail.