In some examples, learning based incident or defect resolution, and test generation may include ascertaining historical log data that includes incident or defect log data associated with operation of a process, and generating, based on the historical log data, step action graphs. Based on grouping of the step action graphs with respect to different incident and defect tickets, an incident and defect action graph may be generated to further generate a machine learning model. Based on an analysis of the machine learning model with respect to a new incident or defect, an output that includes a sequence of actions may be generated to reproduce, for the new incident, steps that result in the new incident, reproduce, for the new defect, an error that results in the new defect, identify a root cause of the new incident or defect, and/or resolve the new incident or defect.