Investigate Incidents

Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel, n'hésitez pas à nous contacter.

Overview

Example incident details view from the Overview tab

An effective incident investigation starts with identifying and categorizing the incident, followed by comprehensive data collection to construct a detailed timeline of events. The Datadog Incident Details page helps you investigate incidents by providing a centralized platform for real-time monitoring, investigation, remediation, collaboration, and analysis. It includes dynamic dashboards and interactive timelines which assist responders in visualizing incident data and patterns. Use the incident details to:

  • Aggregate and display data in real time to help teams identify root causes and assess impacts efficiently.
  • Communicate, track progress, and coordinate remediation efforts by using team collaboration features.
  • Pivot between various views to explore affected services and dependencies, ensuring a thorough investigation and resolution.

Incident details

Every incident in Datadog has its own Incident Details page where you can manage property fields, signals, tasks, documents, responders, and notifications. The Incident Details page contains a global header for quick access to key actions. The remainder of the page is divided into tabbed sections which group related incident data together.

The global header provides access to the Status and Severity selectors and links to your Incident Integrations. For more information on how to configure automatic Slack and Microsoft Teams links for every new incident, see the Incident Settings documentation.

After an incident is resolved, an option appears in the header to generate a postmortem Notebook using a postmortem template. To configure your postmortem templates in the app, navigate to the Incident Settings page and define the structure and content of your postmortems.

Overview tab

The Overview tab serves as the main page to view an incident’s properties and define customer impact. By default, it includes properties such as Root Cause, Services, Teams, Detection Method, and Summary. These properties are categorized into the What Happened, Why it Happened, and Attributes sections.

Add more property fields using <KEY>:<VALUE> pairs from Datadog metric tags, or create custom fields through Incident Settings. Assign values to these properties to improve searches and queries in the Incident Homepage and Incident Management Analytics. To prioritize critical information, you can reorder property fields and move them under various headings.

For customer-facing incidents, specify impact details by adding them in the Impacts section:

Your image description
  1. Click Add.
  2. Specify a start date and time for the impact.
  3. Specify an end date and time for the impact or leave blank if the impact is still ongoing.
  4. Describe the nature of the impact on customers in Scope of impact.
  5. Click Save.

In addition to housing your property fields, the Overview tab also provides the following at-a-glance summary modules:

Summary ModuleDescription
Condensed TimelineDisplays the timestamps when incident status changes occurred, as well as when impact started and ended. This provides a high-level view of the incident’s lifecycle.
Latest NotificationsDisplays the most recent notification sent for the incident, with quick access to the full list of notifications in the Notification tab.
Pending TasksDisplays the most recent incomplete task, with quick access to the full list of tasks in the Remediation tab.
RespondersDisplays the current incident commander as well as avatars for the remaining responders assigned to the incident.
Recent Timeline EntriesDisplays the five most recent entries in the incident timeline, with quick access to see the entire Timeline tab. For more information, see the Timeline documentation.

Additional investigation tools

After declaring an incident, responders can use the Incident Details Page to apply available information so that they can describe and analyze the incident thoroughly.


Further Reading

Documentation, liens et articles supplémentaires utiles:

PREVIEWING: Cyril-Bouchiat/add-vm-package-explorer-doc