Suggest Alert and Runbook changes during Incident after action

Problem to solve

While performing an after action on an incident I'd like to be prompted with suggestions for adjustments to alert thresholds and runbook changes based on what successfully cleared the incident.

Intended users

Further details

Proposal

Permissions and Security

Documentation

Testing

What does success look like, and how can we measure that?

Links / references