At 2:13 a.m., the helpdesk phone rang for the third time in an hour. A finance application kept freezing for users in one branch office. The server team said the application was healthy.

The virtualization team said host resources were normal. The firewall dashboard showed no obvious drops. SNMP graphs looked clean.

CPU, memory, and interface utilization were all comfortably in the green. And yet