Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm looking for a network incident report template.

Is there any template that you use in your company?

share|improve this question
up vote 5 down vote accepted

A lot of what goes into an incident report depends on your audience; the report you file with the technical teams may differ from the report for customers. Here are some sections I use for an internal report.

  • Report title
  • Report author(s) and contact info
  • Report date
  • Report summary/brief synopsis
  • Incident severity (if you have a severity level scheme)
  • Incident duration
  • Services impacted
  • Users/customers impacted
  • Impact to service level agreement(s)
  • Incident timeline (including detection and notifications)
  • Incident details: root cause and analysis
  • Conclusion: description how the incident will be kept from happening again
    • Short term/temporary fix(es)
    • Long term/permanent fix(es)
  • For internal reports: Action items by team/assignee with applicable tracking/bug numbers
  • For internal reports: Related incident/ticket numbers
  • For internal reports: Log excerpts or links to archived logs

I'm keen to see what other people track in their reports!

share|improve this answer
I'd change conclusion to two items: Temporary fix and Permanent fix, but otherwide +1 :) – Zypher Mar 6 '11 at 15:51
Thanks! Addeded. – Cakemox Mar 6 '11 at 16:33
  • Critical incident report

    Header - network information, system information, and severity info 1-5.

    5 is system outage.

  • Observer

    Person who observed the incident

  • Summary

    What was observed.

  • Background

    Has this happened before? Why was this found at this time.

  • Issues

    What this impacts and why?

  • Recommended fixes

    How do I fix this?

  • Audit points

    How do I check to see if this is fixed?

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.