-
Notifications
You must be signed in to change notification settings - Fork 1.2k
[DOCS-10343] Event Management Inbox #30836
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change | ||||
---|---|---|---|---|---|---|
@@ -0,0 +1,66 @@ | ||||||
--- | ||||||
title: Getting Started with Event Management Inbox | ||||||
further_reading: | ||||||
- link: "/service_management/events/ingest//" | ||||||
tag: "doc" | ||||||
text: "Send events to Datadog" | ||||||
- link: "/service_management/events/correlation/" | ||||||
tag: "doc" | ||||||
text: "Learn more about event correlation" | ||||||
- link: "https://www.datadoghq.com/blog/datadog-event-management/" | ||||||
tag: "Blog" | ||||||
text: "Aggregate, correlate, and act on alerts faster with AIOps-powered Event Management" | ||||||
--- | ||||||
|
||||||
## Overview | ||||||
|
||||||
Datadog Event Management [Triage Inbox][4] simplifies incident response by consolidating related events from any source into actionable cases. This centralized view reduces noise and helps teams triage, investigate, and collaborate more effectively. With customizable saved views, you can stay focused on high-priority cases and review correlated alerts, related changes, and telemetry, all in one place. | ||||||
|
||||||
## Case triage and investigation | ||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
|
||||||
|
||||||
Case triage and investigation begins in the Triage Inbox, where you can sort, filter, and manage incoming cases. Collaborate seamlessly with teammates, both within and outside of Datadog, to coordinate responses. From there, you can prioritize, assign, investigate, and escalate cases as needed to drive faster resolution. | ||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
|
||||||
|
||||||
{{< img src="getting_started/event_management/event_mgmt_inbox.mp4" alt="Event Management Inbox, sorting by priority, highlighting changing status and priority capabilities" video=true >}} | ||||||
|
||||||
## Getting Started | ||||||
|
||||||
1. Navigate to [**Service Management** > **Event Management** > **Triage Inbox**][4]. | ||||||
2. Select a project from the left-hand panel to display out-of-the-box status views such as **Open**, **In Progress**, **Closed**, and **Archived**. | ||||||
3. Use the display settings icon to choose between **split view** (for detailed case investigation) or **table view** (for bulk case review and column configuration). Customize your inbox ranking with the **Sort By** dropdown-options include **Priority**, **Created at**, or **Last Updated**. Click **Save** to re-use your customized inbox for future use. | ||||||
5. Update the status, priority, and assignment directly on case cards during triage. | ||||||
6. Maximize screen space by collapsing the left-hand case project panel and the Datadog navigation bar. | ||||||
7. Hover over the case card **alert** count to preview correlated alerts. | ||||||
|
||||||
## Next Steps | ||||||
|
||||||
Now that you've learned how to triage and investigate cases, use these tools to [collaborate](#collaborate-and-integrate) with your team, [take action](#take-action) on root causes, and streamline response efforts. | ||||||
|
||||||
## Collaborate and Integrate | ||||||
|
||||||
On the right hand split-view side panel, you can perform the following: | ||||||
|
||||||
- **Tag and comment**: Collaborate with teammates in the case timeline by tagging users and adding notes. | ||||||
- **Send notifications**: Alert stakeholders with Slack, Microsoft Teams, email, or webhooks. | ||||||
- **Escalate issues**: Trigger an incident or page an on-call responder using [Incident Management][1], [On-Call][2], [Workflow Automation][3], or third-party tools. | ||||||
- **Sync with external tools**: Keep Jira and ServiceNow records in-sync to ensure external stakeholders stay up to date. | ||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
|
||||||
|
||||||
{{< img src="getting_started/event_management/event_mgmt_inbox_right_hand_panel.png" alt="Event Management Inbox right hand panel, highlighting Escalate drop down" style="width:100%;" >}} | ||||||
|
||||||
## Take Action | ||||||
|
||||||
- **Mark root cause**: Identify and mark a related event, such as a faulty change, as the root cause. | ||||||
- **Run workflows**: Execute remediation runbooks manually or trigger them conditionally with [Case Automation Workflows][5]. | ||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Should this be Case Automation Rules? |
||||||
- **Merge cases**: Combine related cases to streamline investigations. | ||||||
- **Split cases**: Separate alerts that require individual investigation. | ||||||
|
||||||
**Note**: When all alerts in the case are resolved, the system automatically closes the case, or you can manually mark it as resolved. | ||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
|
||||||
|
||||||
## Further Reading | ||||||
|
||||||
{{< partial name="whats-next/whats-next.html" >}} | ||||||
|
||||||
[1]: https://docs.datadoghq.com/service_management/incident_management/ | ||||||
[2]: https://docs.datadoghq.com/service_management/on-call/ | ||||||
[3]: https://docs.datadoghq.com/actions/workflows/ | ||||||
[4]: https://app.datadoghq.com/event/correlation | ||||||
[5]: /service_management/case_management/automation_rules/ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is it Event Management Inbox or Triage inbox?