🛠️ title: Remote Troubleshooting Runbook description: Step-by-step guidance for sharing troubleshooting evidence with Control Core support.
🛠️ Remote Troubleshooting Runbook
Use this runbook when opening or responding to a Control Core support ticket.
📌 Choose Sharing Mode
Option A - Export Package
Choose this when you need a point-in-time snapshot and controlled handoff.
- Set
TICKET_REFand incident window. - Add clear issue context in
README.txt. - Generate DIAG or AUDIT package.
- Verify hash/signature metadata.
- Upload/share package with ticket.
Option B - Direct Connector
Choose this when support needs iterative diagnostics over the same issue window.
- Configure connector credentials using least-privilege scope.
- Limit index/query scope to incident data only.
- Validate connection test and preview returned events.
- Share connector session details with ticket reference.
📌 Required Ticket Context
TICKET_REF- Time range
- Environment (
sandbox/production) - Impact summary (who/what is blocked)
- Reproduction hints
📌 Escalation SLA Inputs
Provide the following to avoid back-and-forth:
- Latest package hash (or connector validation ID)
- Policy version/commit references where possible
- Bouncer IDs/resources involved
- Any attempted mitigations and outcomes