Start with demand, not with a table of contents
Infrastructure knowledge bases fail most often because they start as a large documentation project that tries to describe everything. A better starting point is demand: the incidents that recur, the changes that are performed every week, and the questions new engineers ask in their first month. Twenty accurate articles that answer real questions are worth more than two hundred speculative ones.
Vendor knowledge bases such as Cisco Support and the Broadcom portal for VMware products are a good model of this discipline. Their articles are scoped to a product and version, describe a symptom precisely and end with a resolution that can be verified.
Article structure and templates
Define a template for each article type and make the important fields mandatory. Templates make articles predictable to read, easier to review and much easier to search. Keep titles in the words users actually type: an error message or symptom is a better title than an internal project name.
- Every article: title, summary, applies-to (product and version), owner, audience, state and last-reviewed date.
- Troubleshooting: symptom, environment, cause, resolution, verification, rollback.
- Procedure: purpose, prerequisites, impact, ordered steps with expected results, verification.
- Reference: scope, the facts themselves, source of truth and how often it changes.
Writing troubleshooting guides
A troubleshooting guide is a decision path, not a list of things to try. Order the checks from least invasive and most likely to more invasive and less likely, and make each step produce an observation that decides the next one.
- Confirm the symptom and its scope: one user, one site or everyone.
- Check what changed recently: changes, certificates, licences, upgrades.
- Collect read-only evidence: status, logs and counters relevant to the symptom.
- Compare with a known-good baseline or a working peer.
- Apply the least disruptive fix, then verify against the original symptom.
Runbooks and procedures
A runbook describes how a specific service is operated. It differs from a generic how-to because it names the actual systems, thresholds, contacts and escalation paths. The most important parts of a runbook are the ones people skip under pressure: pre-checks, stop conditions and rollback.
Purpose: Add a voice VLAN to access switches at one site
Impact: None expected; brief port flap if trunk is modified
Pre-checks: Backup current config; record interface and VLAN state
Steps: 1. Create VLAN 30 (expected: VLAN listed as active)
2. Assign VLAN to access ports (expected: voice VLAN on port)
Stop if: Any uplink changes state or a pre-check fails
Verification: Phone registers; data VLAN unaffected
Rollback: Restore the backed-up configurationVersioning and review workflows
Infrastructure changes constantly, so knowledge needs a lifecycle. Each article should move through explicit states: draft, in review, published and retired. Publishing requires a reviewer other than the author for anything that changes production systems.
- Version every material change and record a one-line change note, so readers can see what changed and why.
- Set a review interval by risk: procedures that change production need frequent review; reference material can be reviewed less often.
- Trigger reviews from events as well as dates: an upgrade, a new standard or a failed procedure should flag the related articles.
- Retire rather than delete. A retired article explains what replaced it, so old links and tickets still lead somewhere useful.
Measure what helps
Useful measures are reuse (how often an article is linked to resolved work), searches with no result, articles past their review date and feedback from readers. Page views alone say little: an article can be popular because it is confusing.
