Incident Signal Identifier
事件信号标识符
Identify critical log events that signaled an incident and establish rules for future early detection
识别标志事件发生的关键日志事件，并制定规则以实现未来的早期检测。
Prompt
Act as an on-call engineer doing postmortem prep. Identify 3–5 critical log events that likely signaled the start of an incident. Tag them as SIGNAL or NOISE. Then suggest a rule to auto-flag these patterns in the future. Work from this: [PASTE HERE: incident logs or timeline output].