Solutions · IT operations

Runbooks that run themselves, and tell you when they didn’t.

Health checks, onboarding, ticket routing and alert handling as workflows you can read, with an ops center that separates “not running” from “broken”.

What you automate

Three workflows teams build here first.

  1. 01

    Scheduled health checks that page the right person and open a ticket only when the retry also fails.

  2. 02

    Joiner, mover, leaver flows across identity, chat, ticketing and cloud accounts.

  3. 03

    Alert enrichment: pull the log line, the owner and the last deploy before a human ever reads the page.

The workflow

What runs, step by step.

A scheduled check: read the metric, compare it to your threshold, then page, ticket and post only when it is over the line.

  1. 01Every few minutes
  2. 02Read service metrics
  3. 03Over threshold?
  4. 04Page on-call
  5. 05Open ticket
  6. 06Post to ops channel

Every step is a node type in the catalog. Diagram only: no data, no live run.

Before you start

  • An AWS connection that can read CloudWatch metrics (or the Azure or Google Cloud equivalent).
  • A PagerDuty service to open incidents on and a Jira project to open tickets in.
  • A Slack channel the workflow can post to.
  • The thresholds that count as unhealthy, written as branch conditions.

What you get

A check that runs on its own schedule, pages and tickets only when the metric is over the line, and shows up in the ops center with its status and health kept apart.

Limitations

  • A schedule polls: a spike that starts and ends between two runs is not seen. For immediate alerts, start the workflow from your monitoring tool’s webhook instead.
  • The CloudWatch nodes read and write metrics. Log queries go through the HTTP node with an AWS credential.
  • The PagerDuty nodes cover incidents, on-call and services. Other PagerDuty endpoints go through the HTTP node.
  • Auto Fix repairs only what it safely can; the rest stays in Workflow Health for a person to fix.
From the template library

Scheduled health check with email alert

Ping an endpoint every 5 minutes; if it does not return 200, email the on-call address with the status code.

A scheduled HTTP check that branches on the status code and only emails when the endpoint is unhealthy.5 nodes · about 5 min to set up
Every run, inspectable

See each step's output, and approve the risky ones.

Illustrated with a support workflow; the run view and the approval request look the same for every workflow.

Run · support-triagePAUSED FOR APPROVALNew ticketdoneClassify intentdoneApprove refundwaiting on a personReply to customerqueuedOUTPUT · CLASSIFY INTENTintent: "refund"confidence: 0.92customer: example-coAPPROVERsupport-leadAUDITevery step logged
A run paused for approval, with a step's output. Illustration with sample data.
Approval requestWAITING ON A PERSONSUPPORT-TRIAGE · HUMAN.PROMPTRefund order SAMPLE-1042?AMOUNT$84.00REASONItem arrived damagedAI INTENTrefund · confidence 0.92TIMEOUT4 h, then escalateApproveRejectdecision → audit log
The request the approver answers. Illustration with sample data.
Why OCNORA here

Built for this, not adapted to it.

84 trigger types

Schedules, webhooks, queues, mailboxes and app events, so a runbook starts from whatever already happens in your stack.

Cloud services as nodes

394 AWS, 182 Azure and 152 Google Cloud services are in the catalog as typed nodes with the provider’s own auth. No SDK glue.

HTTP node with cURL import

Paste the cURL from a vendor’s docs and get a configured request node. A service with an HTTP API is reachable without waiting for a typed node.

Error workflows and retries

Per-step retries and timeouts, and a separate error workflow that runs when the main one fails, so the failure itself is handled by a workflow.

Workflow Health before the first run

Missing connections, unreachable hosts and bad expressions are caught by a health pass before the schedule fires, and Auto Fix repairs what it safely can.

An ops center, not a list

Status and health are separate columns. An attention tab shows what needs a human now; the failure drawer shows the run, the step and the payload.

Integrations

Apps this kind of workflow usually touches.

Each one has its own page with operations, triggers and auth.

See a workflow run on your own use case.

Book a technical demo. Bring an n8n file or pick a template, and we build it with you on the canvas while Workflow Health checks it before it ever runs.