Metrics Anomaly Analysis: Use anomalous metrics to locate the time window, impact, and candidate causes
Validate metric spikes against historical baselines, correlated indicators, seasonality, and user impact before escalating an alert as an incident.