Billing failure risk triage

RevenueAdvanced

Triage billing failures with operational context

Which failed payments coincide with API errors, unresolved jobs, or incomplete activation?

Start from failed billing outcomes, then add reduced operational signals so a review queue explains why each account needs attention.

Read-only SQL

WITH api_health AS (
  SELECT
    account_id,
    SUM(CASE WHEN status_code >= 500 THEN 1 ELSE 0 END) AS api_errors
  FROM api_requests
  GROUP BY account_id
),
logical_jobs AS (
  SELECT
    job_id,
    account_id,
    MAX(CASE WHEN status = 'failed' THEN 1 ELSE 0 END) AS had_failure,
    MAX(CASE WHEN status = 'completed' THEN 1 ELSE 0 END) AS completed
  FROM job_runs
  GROUP BY job_id, account_id
),
job_health AS (
  SELECT
    account_id,
    SUM(CASE
      WHEN had_failure = 1 AND completed = 0 THEN 1 ELSE 0
    END) AS unresolved_jobs
  FROM logical_jobs
  GROUP BY account_id
),
activation AS (
  SELECT
    account_id,
    MAX(CASE
      WHEN event_name = 'dashboard_created' AND status = 'success'
      THEN 1 ELSE 0
    END) AS activated
  FROM product_events
  GROUP BY account_id
)
SELECT
  a.account_id,
  a.plan,
  b.amount_usd AS failed_payment_usd,
  COALESCE(api.api_errors, 0) AS api_errors,
  COALESCE(jobs.unresolved_jobs, 0) AS unresolved_jobs,
  COALESCE(activation.activated, 0) AS activated,
  1
    + CASE WHEN COALESCE(api.api_errors, 0) > 0 THEN 1 ELSE 0 END
    + CASE WHEN COALESCE(jobs.unresolved_jobs, 0) > 0 THEN 1 ELSE 0 END
    + CASE WHEN COALESCE(activation.activated, 0) = 0 THEN 1 ELSE 0 END
    AS review_signals
FROM billing_events AS b
JOIN accounts AS a ON a.account_id = b.account_id
LEFT JOIN api_health AS api ON api.account_id = b.account_id
LEFT JOIN job_health AS jobs ON jobs.account_id = b.account_id
LEFT JOIN activation ON activation.account_id = b.account_id
WHERE b.event_name = 'payment_failed' AND b.status = 'error'
ORDER BY review_signals DESC, failed_payment_usd DESC;

The dataset and query remain in this browser.

Expected result

Operational review signals for failed payments

Chart value

acct_ember

acct_cinder

account_id	plan	failed_payment_usd	api_errors	unresolved_jobs	activated	review_signals
acct_ember	starter	199	1	1	0	4
acct_cinder	starter	299	0	1	0	3

How to read the query

Each row represents one failed payment. The query aggregates API and job events before joining them.
Activation is a visible context field, not an assertion that onboarding caused payment failure.
The count shows how many issues need investigation for each account.

How to interpret the results

1Decide who can view billing details and how support should follow up.
2Choose incident windows so unrelated historical failures do not inflate current risk.
3Keep payment recovery, product recovery, and account retention as separate outcomes.

Keep the result

Run this query on your own events

Create a free workspace only when you are ready to save the query, connect real events, and monitor the result. No credit card is required.

Save with my events

Triage billing failures with operational context

Triage billing failures with operational context

Operational review signals for failed payments

How to read the query

How to interpret the results

Related lessons

Run this query on your own events