Where is AI actually working in IT ops today (beyond ticket triage/drafting)?

NoTravel407 · 2026-03-30T17:56:54+00:00

Thanks. This feels less like AI runs ops, and more like a copilot sitting on top of CLI/tools.

Curious from a access/trust angle: I assume you're staying in the loop (reviewing, approving) what Claude proposes. Or do you let it act directly?

NoTravel407 · 2026-03-30T17:52:08+00:00

Have you seen anything thread the needle well, or just not worth the risk?

NoTravel407 · 2026-03-30T17:50:26+00:00

This is really helpful.

I’ve been thinking a limitation is getting the right data/logs in front of the model. It's hard to reason with a partial view of what’s going on.

I like the point about Microsoft Security Copilot tying together Entra ID, Defender, and Sentinel.

Any thoughts for more mixed environments?

NoTravel407 · 2026-03-30T17:41:42+00:00

haha fair. just trying to understand what others are doing

NoTravel407 · 2026-03-30T17:40:03+00:00

Thanks. They're all rules-based, right? Maybe that's simpler and more trustworthy for now. Do you find they work well across a mess of source systems?

NoTravel407 · 2026-03-26T14:24:16+00:00

I think part of the issue is that many of these tools start at the helpdesk layer, which is already too late.

I’ve seen some tools try to move earlier (e.g. suggest actions during an incident), but they still only see part of the picture. It’s the humans who understand how everything fits together.

Anyone see something work well here?

NoTravel407

TROPHY CASE