Overview

An effective incident investigation starts with identifying and categorizing the incident, followed by comprehensive data collection to construct a detailed timeline of events. The Datadog Incident Details page helps you investigate incidents by providing a centralized platform for real-time monitoring, investigation, remediation, collaboration, and analysis. It includes dynamic dashboards and interactive timelines which assist responders in visualizing incident data and patterns. Use the incident details to:

• Aggregate and display data in real time to help teams identify root causes and assess impacts efficiently.
• Communicate, track progress, and coordinate remediation efforts by using team collaboration features.
• Pivot between various views to explore affected services and dependencies, ensuring a thorough investigation and resolution.

Incident details

Every incident in Datadog has its own Incident Details page where you can manage property fields, signals, tasks, documents, responders, and notifications. The Incident Details page contains a global header for quick access to key actions. The remainder of the page is divided into tabbed sections which group related incident data together.

Global header

The global header provides access to the Status and Severity selectors and links to your Incident Integrations. For more information on how to configure automatic Slack and Microsoft Teams links for every new incident, see the Incident Settings documentation.

After an incident is resolved, an option appears in the header to generate a postmortem Notebook using a postmortem template. To configure your postmortem templates in the app, navigate to the Incident Settings page and define the structure and content of your postmortems.

Overview tab

The Overview tab serves as the main page to view an incident’s properties and define customer impact. By default, it includes properties such as Root Cause, Services, Teams, Detection Method, and Summary. These properties are categorized into the What Happened, Why it Happened, and Attributes sections.

Add more property fields using <KEY>:<VALUE> pairs from Datadog metric tags, or create custom fields through Incident Settings. Assign values to these properties to improve searches and queries in the Incident Homepage and Incident Management Analytics. To prioritize critical information, you can reorder property fields and move them under various headings.

For customer-facing incidents, specify impact details by adding them in the Impacts section:

1. Click Add.
2. Specify a start date and time for the impact.
3. Specify an end date and time for the impact or leave blank if the impact is still ongoing.
4. Describe the nature of the impact on customers in Scope of impact.
5. Click Save.

In addition to housing your property fields, the Overview tab also provides the following at-a-glance summary modules:

Additional investigation tools

After declaring an incident, responders can use the Incident Details Page to apply available information so that they can describe and analyze the incident thoroughly.

Further Reading

추가 유용한 문서, 링크 및 기사:

Declare an IncidentDOCUMENTATION Describe an IncidentDOCUMENTATION