Independent and not affiliated with the FDA, MHRA, ISPE, PDA, or any agency. Get the appgoutham@madhadi.com
madhadi.comData Integrity & GxP Quality
Browse all topics -> Articles Templates & Procedures Learning paths GlossaryScenariosToolsRegulatory ReferencesLearning PathsTopics About Start here
Log Plug-and-play starting point CSV / CSA

Log: Intermittent and Non-Reproducible Test Failure Investigation Register

A plug-and-play register for tracking every reproduction attempt on an intermittent or non-reproducible validation test failure, across one incident and across incidents that may share a pattern, with cumulative pattern assessment, disposition, and a filled specimen.

Document type: Log

Read and copy the template below into your own quality system. It is a generic starting point for your own internal use, provided as is, with no warranty; see the Terms and License. Adopting it does not by itself create compliance.

This is a ready-to-use register for a test incident that fails once and will not reproduce on demand. Replace every <<FILL: ...>> placeholder with your own specifics, attach it to the test incident or deviation it supports, and route the periodic pattern assessment through your normal QA oversight. Verify each cited regulation against the current source before you rely on it. See Managing test failures during validation for the full disposition logic this register supports.

Why this log exists

“Could not reproduce, no further action” closes an incident on paper and leaves the actual question open: was this a transient blip, or the first sighting of a defect that only shows itself occasionally? You cannot answer that question from one attempt. You answer it by recording every attempt, across every occasion the symptom shows up, in fields structured enough to compare against each other. One unreproduced failure is weak signal. Three unreproduced failures on the same function, each logged with its own conditions, might be the same intermittent defect wearing three different dates, and the only way to see that is if someone counted.

Keep one register entry per test incident that involves a reproduction attempt. If the same symptom recurs on a different incident number, link the two incidents in Part 2 rather than starting the pattern assessment over.

Part 1: Occurrence and reproduction-attempt log (one row per attempt)

FieldFormatRequiredNotes
Occurrence IDTextYesSequential per linked incident
Linked test incident / deviation numberTextYesThe controlling record this attempt supports
Date and time of attemptDate-timeYesFor time-window and shift correlation
Test case, step, or function exercisedTextYes
Build, version, instance, environmentTextYesMust match exactly; a different build is not the same attempt
Observed symptomFree text, factualYesDescribe what happened, not an interpretation of why
Reproduced on this attempt?Yes / NoYes
Test data set usedText or IDYesSame data set across attempts isolates data-dependence
Concurrent activity (jobs, other sessions, load, maintenance window)Free textYes, even if “none observed”What you checked for, not just what you noticed
Evidence referenceLog extract ID, screenshot IDYes
InvestigatorName or IDYes

Occurrence table

Occurrence IDDate/timeIncident #Test case/stepBuild/environmentSymptomReproduced?Data setConcurrent activityEvidence refInvestigator
<<FILL>><<FILL>><<FILL>><<FILL>><<FILL>><<FILL>><<FILL>><<FILL>><<FILL>><<FILL>><<FILL>>

Part 2: Cross-occurrence pattern assessment

Complete this section when a new occurrence is logged, and at least once before any disposition is finalized. The question here is not “did it reproduce this time,” it is “does this look like the same thing happening more than once.”

FieldEntry
Assessment date<<FILL>>
Occurrences assessed (list IDs)<<FILL>>
Incidents linked by this pattern, if more than one<<FILL: incident numbers, or "single incident, multiple attempts">>
Common factor(s) found across occurrences<<FILL: same build, same time window, same user, same instrument, same upstream job, or "none identified">>
Reproduction rate<<FILL: e.g. 1 of 14 attempts, or 3 of 3 occurrences across 2 incidents>>
Similar symptom reported elsewhere (other test cases, other systems, production help desk)<<FILL: yes with reference, or checked and none found>>
Updated classificationUnexplained one-off, still unresolved / Confirmed intermittent defect / Confirmed transient environmental cause / Confirmed test-artifact or execution error
Basis for the updated classification<<FILL>>
Assessor<<FILL>>

A classification of “confirmed intermittent defect” moves the item out of this register’s open-ended monitoring and into the normal deviation and corrective action path for a known defect with a low but real reproduction rate. This register is for the period before that is known, not a substitute for it once it is.

Part 3: Disposition and monitoring trigger

FieldEntry
Root cause statusIdentified / Not identified despite the investigation in Parts 1 and 2
GxP relevance of the affected function<<FILL>>
Risk-based justification for the disposition<<FILL: state the reasoning, not just the conclusion>>
Monitoring defined (what is watched, and how)<<FILL>>
Reopening trigger (the specific condition that reopens the investigation)<<FILL: e.g. any recurrence within 90 days, any recurrence on a different instance, a related complaint or deviation elsewhere>>
Review cadence while monitored<<FILL>>
DispositionClosed, accepted with monitoring / Closed, root cause identified and corrected / Open, carried to validation summary report pending watch period
QA approval (name, date)<<FILL>>

Acceptance criteria

  • Every reproduction attempt is logged as its own row, with the conditions of that specific attempt, not summarized after the fact as “tried several times, could not reproduce.”
  • A cross-occurrence pattern assessment exists before any disposition closes the item, even when the assessment concludes no pattern was found.
  • A disposition resting on an unidentified root cause states the investigation performed, the risk-based justification, and a specific reopening trigger, not just “monitor going forward.”
  • If the pattern assessment reclassifies the item as a confirmed intermittent defect, it is routed into the standard deviation and corrective action process and this register stops being the controlling record.

Retention

Retain this register with the linked test incident or deviation record, per the records retention schedule, for not less than <<FILL: retention period>>.

References

21 CFR 211.192 (investigation of unexplained discrepancies). EU GMP Annex 15, Qualification and Validation (2015) (documentation of deviations from the validation protocol with justification). EU GMP Annex 11, Computerised Systems (2011) (reporting and assessment of deviations arising during validation). ALCOA+ data integrity principles as described in the FDA 2018 data integrity guidance, MHRA GxP Data Integrity Guidance and Definitions, and PIC/S PI 041. ICH Q9, Quality Risk Management, for the proportionality of the monitoring and reopening decision.

Confirm the current version of each reference before issue.


Filled specimen

The following shows the register for an example intermittent failure found during OQ of a building management system monitoring a cell therapy manufacturing suite. The company, system, and numbers are illustrative.

Occurrence table

Occurrence IDDate/timeIncident #Test case/stepBuild/environmentSymptomReproduced?Data setConcurrent activityEvidence refInvestigator
OCC-00103 Sep 2026, 14:22TI-0091OQ-BMS-018 step 3, differential pressure alarm verificationBMS-QUAL, build 4.2Suite differential pressure alarm failed to trigger at the test setpoint; sensor read dropped out for approximately 8 secondsYes, failedTD-BMS-02HVAC compressor for the adjoining air handling unit cycled on at 14:21 per the BMS event logLOG-BMS-0091-AR. Okafor
OCC-00205 Sep 2026, 09:47TI-0091Re-attempt of OQ-BMS-018 step 3BMS-QUAL, build 4.2Alarm triggered correctly at setpointNo, passedTD-BMS-02No compressor cycling logged in the preceding 2 minutesLOG-BMS-0091-BR. Okafor
OCC-00309 Sep 2026, 14:05TI-0091Re-attempt of OQ-BMS-018 step 3BMS-QUAL, build 4.2Same symptom as OCC-001: sensor read dropped out for approximately 6 seconds, alarm delayedYes, failedTD-BMS-02Compressor cycled on at 14:04 per the BMS event logLOG-BMS-0091-CM. Suarez

Cross-occurrence pattern assessment

FieldEntry
Assessment date09 Sep 2026
Occurrences assessedOCC-001, OCC-002, OCC-003
Incidents linkedSingle incident, TI-0091, three attempts
Common factor(s) foundBoth failing attempts (OCC-001, OCC-003) coincide with the adjoining air handling unit’s compressor cycling on within 60 seconds prior; the one passing attempt (OCC-002) has no compressor cycling event in the same window
Reproduction rate2 of 3 attempts, both correlating with the same external event
Similar symptom reported elsewhereFacilities maintenance log checked for the same sensor and adjacent sensors over the prior 90 days: two unexplained short-duration pressure readings noted on the same sensor circuit, dates coincide with scheduled compressor maintenance test runs
Updated classificationConfirmed intermittent defect, electrical interference suspected
BasisTwo of three controlled attempts reproduced the symptom, both correlating with the same external trigger; the facilities log corroborates a pre-existing unexplained pattern on the same circuit, which rules out a one-time fluke

Disposition and monitoring trigger

FieldEntry
Root cause statusIdentified following pattern correlation: the differential pressure sensor’s signal cable for this suite shares a cable tray run with the compressor’s power feed for a 4-meter section, and the cable shielding at that section was found improperly terminated during a facilities walk-down triggered by this pattern
GxP relevanceHigh. The differential pressure alarm is a critical monitoring point for a cell therapy manufacturing suite classification boundary
Risk-based justificationNot closed as monitoring-only; the corroborating facilities log plus the controlled reproduction rate were sufficient to assign root cause and proceed to corrective action rather than accept an unknown cause
Monitoring definedN/A, superseded by corrective action below
Reopening triggerN/A
Review cadenceN/A
DispositionClosed, root cause identified and corrected. Cable shielding at the affected section re-terminated per electrical standard <<FILL: reference>> and the cable re-routed outside the shared tray run under change control CC-<<FILL>>. OQ-BMS-018 step 3 re-executed five times under compressor cycling conditions, all passed. TI-0091 closed to DEV-<<FILL>> with the corrective action and re-execution records referenced
QA approval<<FILL: name, date>>

This is what the register is for: the first occurrence alone looked exactly like a fluke, and closing it there would have been defensible-sounding and wrong. The second attempt passing made it tempting to stop. The third attempt, logged with the same discipline as the first two, is what turned a coincidence into a pattern with a real electrical cause behind it.

Common inspection findings this register prevents

  • A test incident closed as “could not reproduce, no further action” with no record of what was actually checked.
  • Multiple unreproduced failures on related functions, logged as separate unrelated incidents, with no comparison ever made between them.
  • A disposition that calls the root cause “unknown” with no risk-based justification and no condition defined for reopening the investigation.
  • An intermittent defect that was in fact reproducible under the right conditions, missed because every reproduction attempt used different, undocumented conditions.
  • A pattern visible in a facilities, help desk, or production log that nobody cross-checked against the validation incident.

How to adapt this register

  1. Decide the trigger for opening a register entry: every test incident where the first reproduction attempt fails to confirm the original result, or only incidents already classified as GxP-relevant. State the choice in your test incident management procedure.
  2. Set the minimum number of controlled reproduction attempts your procedure requires before a “root cause not identified” disposition is acceptable, scaled to the function’s risk.
  3. Extend Part 2’s “similar symptom reported elsewhere” check to the specific adjacent logs your environment actually has: a help desk ticketing system, an equipment alarm history, a network monitoring tool.
  4. If your quality system already has a trending or signal-detection tool that would catch this kind of cross-incident pattern automatically, reference it here rather than running the comparison by hand, and use this register to capture the individual occurrence detail that feeds it.
Use madhadi.com as an app Full screen, works offline, one tap from your home screen.