Root Cause Casebook is a field guide to how technology teams diagnose public IT incidents. Each evidence-grounded case preserves the hypotheses, wrong turns, decisive tests, and reasoning that narrowed the fault domain.
ThousandEyes examined a broad Meta outage affecting Facebook, Messenger, WhatsApp, and later Instagram. The most valuable reasoning move was showing that frontend network reachability remained normal while application errors and timeouts rose, which excluded one major fault domain immediately.
How to investigate an IT incident
01Symptom
Record what users and systems actually reported.
02Hypothesis
Keep the first plausible explanation provisional.
03Evidence
Find observations that narrow the fault domain.
04Turning point
Identify what changed the investigation’s direction.