# Understanding Results *** Kosmos analyzes your incident data to surface patterns and prevent recurring issues. Here's how to interpret what you see. ### Key Concepts #### Risk Events A **Risk Event** is Kosmos's machine-generated analysis of a pattern or anomaly that may indicate a systemic problem. Think of these as early warnings—signals that something in your delivery process needs attention. Risk Events are surfaced automatically when Kosmos identifies: * Recurring incident patterns * Correlation between deployments and issues * Unusual spikes or trends in your data **Not every Risk Event requires action.** Some may be expected (planned maintenance, known issues). You can dismiss Risk Events that aren't relevant, and Kosmos learns from your feedback. #### RCA Reports An **RCA Report** (Root Cause Analysis) is a **human-confirmed** analysis. When you review a Risk Event and determine it represents a real issue, you promote it to an RCA with one click. The underlying analysis is the same—promotion is a status change that marks it as the official record. **Why this distinction matters:** Kosmos won't label something as an "official RCA" without your confirmation. This protects you from inaccurate automated outputs being treated as fact. You stay in control. RCA Reports include: * **Summary:** Plain-language explanation of what happened * **Correlated Evidence:** Linked commits, PRs, tickets, and cases * **Timeline:** Sequence of events leading to the issue * **Recommendations:** Suggested preventive actions *** ### Reading the Dashboard #### Risk Events View | Column | Meaning | | --------------- | ------------------------------------------------- | | **Status** | New, Acknowledged, Dismissed | | **Severity** | High, Medium, Low — based on frequency and impact | | **Pattern** | Description of what Kosmos detected | | **First Seen** | When this pattern first appeared | | **Occurrences** | How many times this pattern has repeated | **Actions you can take:** * **Acknowledge** — You're aware and investigating * **Promote to RCA** — Generate a full root cause analysis * **Dismiss** — Not relevant; Kosmos will learn from this *** #### RCA Report View Each RCA Report includes: **1. Executive Summary** A 2-3 sentence overview suitable for sharing with leadership. **2. Correlated Evidence** Kosmos links related data across your systems: * Jira issues that match the incident pattern * GitHub commits/PRs deployed near the incident time * Salesforce cases from affected customers **3. Root Cause Analysis** AI-generated analysis identifying likely causes, including: * What changed before the incident * Which systems or services were affected * Contributing factors (deployment timing, code changes, config updates) **4. Recommendations** Actionable next steps to prevent recurrence. #### RCA Actions From any RCA Report, you can: * **Export PDF** — Download a formatted report for sharing outside Kosmos * **Share** — Copy a link to share with team members * **Print** — Print directly from your browser * **Create Jira Ticket** — Create a follow-up ticket in Jira with the RCA details pre-filled (requires Jira integration) *** ### Providing Feedback Your feedback helps Kosmos learn and improve. You can provide feedback at two levels: **Correlation Feedback** When viewing a correlation, you'll see "Is this correlation accurate?" with three options: * **Correct** — The correlation is valid * **Partial** — Some elements are correct, others aren't * **Wrong** — This correlation isn't meaningful **RCA Feedback** After reviewing an RCA, you can rate: * Was the root cause accurate? * Were the recommendations helpful? * If inaccurate, what was the actual root cause? This feedback feeds into Kosmos's calibration engine. Over time, the system learns your environment's patterns and produces more accurate results. *** ### The Correlation Engine Kosmos's key differentiator is **correlation**—connecting data points across systems that humans typically analyze in silos. **Example:** > A customer reports an issue in Salesforce. Kosmos correlates this with a Jira bug logged the same day and a GitHub deployment 2 hours prior. The RCA shows the deployment introduced a regression affecting that customer's use case. This cross-system visibility is what enables prevention, not just faster response. *** ### Understanding Correlations #### Deployment Timeline When viewing a Risk Event or RCA, you'll see a visual timeline showing deployments that occurred within ±8 hours of the incident. This helps you quickly identify which releases may have contributed to the issue. The timeline shows: * Your incident at the center * Deployments before and after, with version labels * Time delta between each deployment and the incident * Confidence indicators: High (green), Medium (yellow), Low (gray) Click any deployment marker to see details including version name, release time, change type, and related issues. #### Correlation Scores Each correlation displays a percentage score. Click the **ℹ️** icon next to any score to see how it was calculated. Kosmos weights multiple factors: * **Time proximity** — How close the events occurred * **System/entity match** — Same service or component affected * **Issue keys** — Matching ticket references (e.g., KOS-123) * **Text similarity** — Similar descriptions or error messages * **Component overlap** — Shared file paths or services * **Author/assignee match** — Same person involved * **PR number match** — Linked pull requests * **Error pattern family** — Similar error types Higher scores mean more factors aligned. A 25% score typically indicates a single weak match (like text similarity alone), while 70%+ means multiple strong signals converged. #### Evidence Breakdown Correlations now show *why* Kosmos thinks two events are related. Hover or click on any correlation to see the evidence breakdown: * Which signals contributed to the match * The reasoning behind the correlation * Confidence level for each factor This transparency helps you trust and explain the analysis to stakeholders. *** ### What "Preventative Intelligence" Means Traditional tools help you respond faster (reduce MTTR). Kosmos helps you **prevent incidents from recurring** by: 1. **Detecting patterns** before they become outages 2. **Correlating deployments** with downstream issues 3. **Surfacing systemic risks** across your toolchain The goal: fewer incidents, not just faster fixes. *** ### Questions About Your Results? Your Kosmos team will walk you through your initial Look Back findings. If you have questions between scheduled calls, reach out to your dedicated contact or email . *** **Questions?** Contact | [app.kosmoslabs.ai](https://app.kosmoslabs.ai/) © 2026 Kosmos AI Labs, Inc.