# Incident Postmortem Draft From Logs and Slack

Source: https://maito.app/workflows/draft-the-incident-postmortem

Maito reads the incident channel and your monitoring data, then drafts a postmortem with timeline, impact, cause and follow-ups for the team to review.

Turn the incident channel and logs into a postmortem draft.

[Engineering](https://maito.app/workflows/team/engineering) · [Software](https://maito.app/workflows/industry/software) · When you ask · Updated October 19, 2026

Works with

-   Slack
-   Email
-   [Datadog](https://maito.app/workflows/tool/datadog)
-   [Sentry](https://maito.app/workflows/tool/sentry)
-   [New Relic](https://maito.app/workflows/tool/new-relic)
-   [Grafana](https://maito.app/workflows/tool/grafana)

## How do you draft an incident postmortem?

To draft an incident postmortem, give Maito the incident channel and time window. It reads the thread you point it to and the logs from Datadog, Sentry, New Relic or Grafana, then writes a document with the timeline, customer impact, likely cause and follow-up actions. You get it attached in Slack to edit.

## How it's done today

Postmortems get written a week later from memory.

## What Maito does

1.  Read the incident channel and timeline
2.  Pull logs and deploys
3.  Draft cause, impact, timeline and follow-ups

## Example

**Alex** (9:05 AM):

draft the postmortem for yesterday's checkout outage. The timeline we pasted is in this thread.

**Maito** (9:24 AM):

Draft attached: postmortem-checkout-oct-17.pdf.

**Impact:** 55 minutes, 2:07 PM to 3:02 PM UTC. About 3,100 failed checkouts, 18% of attempts in that window.

**Cause:** deploy 4.12 ran a migration that locked the orders table. Checkout requests queued behind it and timed out.

**Catch:** Datadog alerted at 2:09 PM, but nobody acknowledged it until 2:31 PM. The alert went to #alerts-low, not the on-call page. That's 22 of the 55 minutes.

Follow-ups drafted: 5, including run migrations off-peak, a lock timeout, and fixing the alert route.

From this thread and Datadog. The timeline has one gap, 2:40 to 2:52 PM. Who knows what happened then?

**Alex** (9:40 AM):

Dana's team paused the ad campaign at 2:44 PM. Add it.

**Maito** (9:41 AM):

Added to the timeline and to impact: the pause stopped new traffic. Updated file attached.

## How to set it up

When you ask Draft the incident postmortem

Set up

Nothing to set up. Ask in Slack or by email whenever you need it.

Connect logs

-   Datadog
-   Sentry
-   New Relic
-   Grafana

Not connected yet? Your agent sends you a link to sign in.

## What it won't do

The cause is a best reading of the logs and the conversation. Your engineers confirm it before the postmortem is shared.

## Questions

### Which monitoring tools does it use?

Datadog, Sentry, New Relic and Grafana, whichever your team has connected.

### Does it assign blame?

No. It describes what happened and when, including delays like an unacknowledged alert, and leaves conclusions about people to you.

### Can it read the whole incident channel by itself?

Only channels where it was mentioned. Point it at the thread and it works from there.

## More engineering workflows

-   [Turn a ticket into a tested pull request Hand over a well-scoped ticket and get back a pull request with tests. Engineering · When you ask Works with Linear, Jira.](https://maito.app/workflows/turn-a-ticket-into-a-tested-pull-request)
-   [Review a teammate's pull request Get a first review that catches bugs and missed cases before a person looks. Engineering · When something happens Works with Slack, Email.](https://maito.app/workflows/review-a-teammates-pull-request)
-   [Check a change for security problems Look at a change for injection, leaked secrets and missing permission checks. Engineering · When you ask Works with Slack, Email.](https://maito.app/workflows/check-a-change-for-security-problems)
-   [Write the changelog Twice a week, turn merged pull requests into a changelog people can read. Engineering · On a schedule Works with Slack, Email.](https://maito.app/workflows/write-the-changelog)
-   [Nudge stale pull requests Pull requests waiting too long get a polite reminder to the right reviewer. Engineering · On a schedule Works with Slack, Email.](https://maito.app/workflows/nudge-stale-pull-requests)
-   [File a bug from a Slack thread When a bug comes up in chat, mention Maito and it gets filed once, with details and no duplicates. Engineering · When you ask Works with Linear, Jira.](https://maito.app/workflows/file-a-bug-from-a-slack-thread)

[See all workflows](https://maito.app/workflows)

## Put your AI teammate to work.

Set it up in minutes. Start with this one, and let it earn the next one.

[Put Maito to work](https://maito.app/login?returnTo=%2Fworkflows%2Fdraft-the-incident-postmortem)[Book a demo](mailto:support@maito.app?subject=Maito%20demo)