Three-tier cascade
L1 fingerprint cache → L2 vector merge → L3 LLM root cause. Only ~1% of exceptions actually call the LLM — the cost ladder cuts analysis cost by two orders of magnitude.
AI-driven root cause analysis for Java production errors — stacktrace fingerprint merging + LLM root cause localization + scheduled weekly digest. Cut mean time to localize incidents by ~40%.
Architecture
Logback Appender · HTTP /collect · Kafka (off by default)
SHA-256 + framework-frame filtering · versioned fingerprints
Exact cache hit → vector merge → LLM root cause (core hub)
Real-time surge detection · weekly Top-N aggregation
Feishu real-time alert · Feishu weekly report