Monitoring alarm investigation record
StatMedAnalysis | 9 November 2026
Use aggregate or synthetic process observations.

Complete one record per alert using summary observations. Keep original values intact.
Chart/version: __________  Signal rule: __________  First signaled occasion: ________
Observed statistic / units: __________  Threshold: ________  Crossing direction: ________
1. Confirm the source timestamp, device, unit and calculation against the frozen specification.
2. List possible explanations and identify what observation would distinguish them.
Explanation | Evidence for | Evidence against | Follow-up and owner | Decision
___________ | ____________ | ________________ | ___________________ | ________
___________ | ____________ | ________________ | ___________________ | ________
Action / restart rule / date: ________________________________________________
Fictional example: upper cumulative sum 4 crosses a threshold of 3 at occasion four. Check the first four raw benchmark durations and configuration log. The crossing remains recorded even if investigation later identifies a configuration change.
Completion check: observation, statistical signal, operational decision and causal explanation are recorded in separate fields.