Most runbooks are useless. Either they're too abstract ('check the logs') or they're a 40-page Confluence doc that nobody reads at 3 AM.

Here is the template I use. It fits on one page and works.

The template

1. Trigger. The exact alert name and what it means.

2. Impact. Who is affected? What are they seeing? Is this user-facing?