# Incident Analysis

> The ability to reconstruct and analyze an incident from the events a system logged.

Record: `lexicon:incident-analysis`
Kind: capability
Layer: [Observability](https://banes-lab.com/records/layer/observability.md)
Canonical: https://banes-lab.com/ontology/lexicon#lexicon-incident-analysis

Listed in [Lexicon terms](https://banes-lab.com/api/records/lexicon.md), after [Traces](https://banes-lab.com/records/lexicon/traces.md) and before [Noise/Personal Data Leakage](https://banes-lab.com/records/lexicon/noise-personal-data-leakage.md).

## Category

- [Observability / Auditability / Traceability](https://banes-lab.com/records/lexicon-category/observability-auditability-traceability.md)

## Enabled by

- [Logging](https://banes-lab.com/records/architecture/logging.md)

## Linked from

- [Observability / Auditability / Traceability](https://banes-lab.com/ontology/principles/architecture-category-observability-auditability-traceability.md)