OK, but it's not a "SEV", he's looking at 2 years of logs on hundreds of thousands of servers over a wide variety of applications. Nothing appears to be "down". This is more like an investigation looking for some high-value efficiency improvements (which is something he's written about).
I am sure he did it "quick", but mere minutes of work and mostly just waiting around for something like that analysis? I doubt it!
Seems pretty normal to me - we used to do this kind of thing on the regular. SEV analysis often requires digging through months of past logs to ascertain all the affected customers. If that takes a day every time you hit a customer-facing issue, your team ends up spending all their time on after action reports, and never gets any engineering done.
I am sure he did it "quick", but mere minutes of work and mostly just waiting around for something like that analysis? I doubt it!