Most outages trace back to a change, not a failure.

Systems that have been running reliably for months rarely break spontaneously. Something usually changed first: a deployment, a config update, a dependency version bump.

Treating an outage as a mystery to diagnose from scratch ignores the most useful question available: what changed right before this started.

The failure is the symptom. The change is almost always where the actual answer is.