From AIOps Anomaly Detection to LLM-Powered RCA: How AI for Incident Response Actually Evolved

The promise a few years ago was simple: an ML system that watches your metrics, learns what normal looks like, and alerts when something deviates. It worked for detection. Completely missed diagnosis. You'd get an alert saying "latency anomaly on checkout service" and then spend the next 30 minutes doing exactly what you did before this. Opening Datadog, checking deploys, reading logs, and connecting the dots manually. The ML powered system told you something was wrong. You still had to figure o