--- title: Detecting Major Incidents in Snowflake with Embeddings,... description: A Snowflake-native pipeline for automatically detecting major incidents from customer support cases is presented. The approach combines text embeddings (via... canonical: https://daily.dev/posts/detecting-major-incidents-in-snowflake-with-embeddings-clustering-and-llms-986r1ykuo twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Detecting Major Incidents in Snowflake with Embeddings, Clustering, and LLMs | daily.dev og:description: A Snowflake-native pipeline for automatically detecting major incidents from customer support cases is presented. The approach combines text embeddings (via... og:url: https://daily.dev/posts/detecting-major-incidents-in-snowflake-with-embeddings-clustering-and-llms-986r1ykuo og:image: https://api.daily.dev/og/posts/986R1ykUo.png og:image:alt: Detecting Major Incidents in Snowflake with Embeddings, Clustering, and LLMs og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Detecting Major Incidents in Snowflake with Embeddings, Clustering, and LLMs **[Snowflake Community](https://daily.dev/sources/snowflake_comm)** · 10 min read · 1 upvotes · 0 comments ## Summary A Snowflake-native pipeline for automatically detecting major incidents from customer support cases is presented. The approach combines text embeddings (via Snowflake Cortex EMBED_TEXT) with DBSCAN clustering and two-stage LLM assistance: first, an LLM gates borderline case-pair similarities to sharpen cluster boundaries; second, another LLM prompt classifies each resulting cluster as a potential major incident or not. The full implementation uses Snowflake SQL, a Snowpark Python UDAF wrapping scikit-learn's DBSCAN, and AI_COMPLETE calls to Claude. In production experiments, the pipeline detected over 70% of incidents once at least three related support cases had been filed, reducing Mean Time To Detect and improving customer experience. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [AI-Powered Intellectual Property Similarity Detection on Snowflake](https://daily.dev/posts/ai-powered-intellectual-property-similarity-detection-on-snowflake-gfqyjsm6a) · Snowflake Community · 0 upvotes · 0 comments - [Automated Data Classification with Snowflake: From Nowhere to Production](https://daily.dev/posts/automated-data-classification-with-snowflake-from-nowhere-to-production-9msjfl3td) · Snowflake Community · 0 upvotes · 0 comments - [Smart Complaint Deduplication Using Snowflake-Native AISQL](https://daily.dev/posts/smart-complaint-deduplication-using-snowflake-native-aisql-mwl4os4zd) · Snowflake Community · 0 upvotes · 0 comments - [Log-to-Action](https://daily.dev/posts/log-to-action-fh4dx99gr) · Snowflake Community · 0 upvotes · 0 comments - [6 Ways to Turn Snowflake Data into Decisions: From Transforming Tables to Tracking the KPIs That Matter](https://daily.dev/posts/6-ways-to-turn-snowflake-data-into-decisions-from-transforming-tables-to-tracking-the-kpis-that-mat-q57dfmflp) · Snowflake Community · 0 upvotes · 0 comments --- Tags: [#llm](https://daily.dev/tags/llm), [#snowflake](https://daily.dev/tags/snowflake), [#embeddings](https://daily.dev/tags/embeddings) [View this post on daily.dev](https://daily.dev/posts/detecting-major-incidents-in-snowflake-with-embeddings-clustering-and-llms-986r1ykuo) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Detecting Major Incidents in Snowflake with Embeddings, Clustering, and LLMs","url":"https://daily.dev/posts/detecting-major-incidents-in-snowflake-with-embeddings-clustering-and-llms-986r1ykuo","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/detecting-major-incidents-in-snowflake-with-embeddings-clustering-and-llms-986r1ykuo"},"datePublished":"2026-03-06T15:07:48.620Z","dateModified":"2026-03-06T15:08:16.934Z","description":"A Snowflake-native pipeline for automatically detecting major incidents from customer support cases is presented. The approach combines text embeddings (via...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7ec37759deb767631f463939cc9101a1?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7ec37759deb767631f463939cc9101a1?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Snowflake Community","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Snowflake Community","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/3eb5260f70bb4653be0f9581c0d937c8","url":"https://daily.dev/sources/snowflake_comm"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/detecting-major-incidents-in-snowflake-with-embeddings-clustering-and-llms-986r1ykuo","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"llm,snowflake,embeddings","timeRequired":"PT10M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Snowflake Community","item":"https://daily.dev/sources/snowflake_comm"},{"@type":"ListItem","position":3,"name":"Detecting Major Incidents in Snowflake with Embeddings, Clustering, and LLMs"}]} ```