Quark Feature Guide

Quark is the AI layer in front of your monitoring. It reads the raw signal from NetOPS, groups the noise into the few things that matter, and explains them in plain language — so your team reads answers, not alert streams.

One principle runs through Quark: verdict first, calm by default, detail on demand. Nothing shouts unless it needs you.

In this release: Incident Intelligence · Alerts & Delivery · Kratos · Dashboard & Reporting · Access · Accessibility

AI Incident Intelligence

• Three attention tiers — Every incident is ranked: Needs you now, worth a look, or Low priority (routed to the log).
• Smart grouping — Recurring on one host (ground truth) vs. correlated across hosts (inference), labeled with the strongest reason — and it never fabricates a cause.
• Capacity trend detection — Resource-exhaustion predictions (disk, etc.) surface under one Capacity trend heading with a resource tag.
• Flapping detection — Alerts that toggle up and down collapse into one incident, held as a single alert until it settles — no incident-per-flip, no email storm.
• Recurring rhythms — Detects issues that repeat on a schedule, shows which days they happened, and surfaces the resource or app common to each peak.
• Connect the dots — Continuously or on demand, it looks across live and recent monitored history to uncover related incidents, recurring patterns, and the systems behind them — giving every alert the context behind what's happening now.
• Verdict-first analysis — Leads with the answer: a plain verdict, confidence, an evidence chart, and collapsible detail.
• Live event indicators — A LIVE feed with an "Unseen" marker on the newest event that blinks on arrival, then settles.

Alerts & Delivery

• Grouped email — Related alerts bundle into one message on your chosen cadence.
• Tiered routing — Urgent emailed now; the rest batched or sent as a daily digest.
• Verdict-first subject lines — Plain-language and mobile-legible — no raw trigger dumps.
• Severity-aware overdue — Each tier has its own clock, so a busy week never lights up for normal work.

Kratos — Network Configuration Backups

Quark's network configuration engine — captures and versions your firewall, router, and switch configs.

• Config captures — Each device's running config, captured after every sync and versioned with a timestamp.
• History & diffs — Per-device history with version-to-version diffs and downloads.
• Ask any version — Ask Quark "what changed between v1 and v10?" — it compares any two captures, not just consecutive ones.
• Change alerts — Grouped by window; planned and cosmetic changes filtered; security changes escalated at once.

Dashboard & Reporting

• Environment Health grade — A severity-weighted GPA for your estate, shown on a green-to-red spectrum.
• Right now vs. Overall — Separates the current situation from the standing health grade, so a blip never contradicts a healthy estate.
• 7-day outlook — Each day's worst severity and still-open count; aging incidents flagged as overdue.
• SLA reporting — Host-uptime status (met / at-risk / breached) with an "ask why" path into any host below target.

Access

Quark inherits roles from NetOPS — Quark uses NetOPS roles and permissions, with no separate user management. Administrators have full configuration access. All users can access the dashboard, while incidents and reports are limited to authorized hosts.

Accessibility

• Colorblind-safe status system — Shape and number carry meaning, with color as reinforcement — never color alone.
• Reduced-motion support — Every live animation quiets to a steady, information-equivalent state when reduced motion is set.

Notes & Known Considerations

• Quark correlates and predicts, but doesn't remediate — It names what to investigate rather than acting on your infrastructure.

Quark — less noise, more signal.