You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/en/service_management/incident_management/declare.md
+8-2Lines changed: 8 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -15,7 +15,7 @@ You can declare an incident from multiple places within the Datadog platform, su
15
15
16
16
In the [Datadog UI][1], click **Declare Incident** to create an incident.
17
17
18
-
The *Declare Incident* modal displays a collapsible side panel that contains helper text and descriptions for the severities and statuses used by your organization. The helper text and descriptions are customizable in [Incident Settings][2].
18
+
The *Declare Incident* modal displays a collapsible side panel that contains helper text and descriptions for the severities and statuses used by your organization. The helper text and descriptions are customizable in [Incident Settings][2].
19
19
20
20
## From a monitor
21
21
@@ -32,7 +32,7 @@ Incidents created from a monitor will inherit [field values][10] from the monito
32
32
Declare an incident directly from a Cloud SIEM or Workload Protection signal side panel, by clicking **Declare incident** or **Escalate Investigation**. For more information, see [Investigate Security Signals][3].
33
33
34
34
Declare an incident from an App and API Protection signal through the actions listed in the signal side panel. Click **Show all actions** and click **Declare Incident**.
35
-
For more information, see [Investigate Security Signals][4] for App and API Protection.
35
+
For more information, see [Investigate Security Signals][4] for App and API Protection.
@@ -58,6 +58,10 @@ Use the [Datadog Clipboard][6] to gather multiple monitors and graphs and to gen
58
58
59
59
{{< img src="service_management/incidents/declare/declare_clipboard.png" alt="Declare an incident from the Datadog Clipboard" style="width:90%;" >}}
60
60
61
+
## From a Datadog On-Call page
62
+
63
+
You can declare an incident directly from a [Datadog On-Call page][12]. From the [On-Call pages list][13], select a page and click **Declare Incident** to create an incident and automatically associate it with the relevant on-call team.
64
+
61
65
## From Slack
62
66
63
67
If you have the [Datadog integration enabled on Slack][7], you can declare a new incident with the slash command `/datadog incident` from any Slack channel.
@@ -100,3 +104,5 @@ You can declare an incident from individual Handoff Notification cards.
Copy file name to clipboardExpand all lines: content/en/service_management/incident_management/incident_settings/notification_rules.md
+7-2Lines changed: 7 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -19,8 +19,12 @@ Use notification rules to:
19
19
20
20
1. Navigate to [Incident Settings Notification Rules][1].
21
21
1. Click **New Rule**.
22
-
2. Under **For incidents matching...**, select the incident property field `key:value` pairs you want notifications to be sent for. By default, these filters are empty, and a notification rule triggers for any incident.
23
-
3.**Notify**: Select your notification recipients. Notifications can be sent to any of Datadog's existing [notification integrations][2]. If you want to notify a recipient's mobile device, select the option for their name that includes **(Mobile Push Notification)**. The recipient must have enabled notifications in the [Datadog mobile app][3] for this option to appear.
22
+
1. Select the `key:value` pairs for the incident properties that should trigger a notification. By default, no filters are set, and a notification rule triggers whenever an incident is declared or its attributes are updated.
23
+
1. Select your notification recipients.
24
+
- Send notifications to any of Datadog's [supported notification integrations][2].
25
+
- Notify [Datadog On-Call teams][4] using `@oncall-` handles.
26
+
- To notify a recipient's mobile device, find their name and select the option that includes **(Mobile Push Notification)**. The recipient must have notifications enabled in the [Datadog mobile app][3] for this option to appear.
27
+
- If you want to notify the incident Slack channel, use handle `@incident-slack-channel`.
24
28
4.**With Template**: Select the desired message template you want the notification rule to use.
25
29
5.**Renotify on updates to**: Select the incident properties that trigger notifications. A new notification is sent whenever one or more of the selected properties change. **Note**: properties already in your filters (see step 2) are automatically included in these rules.
26
30
6. Click **Save**
@@ -39,3 +43,4 @@ You can perform the following operations to manage your notification rules.
Copy file name to clipboardExpand all lines: content/en/service_management/incident_management/notification.md
+20-3Lines changed: 20 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,7 +11,14 @@ further_reading:
11
11
12
12
## Overview
13
13
14
-
All stakeholder notifications for an incident are consolidated in the incident’s Notifications tab. You can manually create, save as draft, and send notifications directly from this page. Automated notifications sent by [Notification Rules][1] for the incident in question are also listed in this section.
14
+
15
+
Effective incident response depends on notifying the right people at the right time. Datadog Incident Management provides two key ways to coordinate communication during an incident:
16
+
17
+
- The **Notifications** tab centralizes stakeholder communications. From here, you can create and send manual updates, save drafts, and view all automated messages triggered by [Notification Rules][1].
18
+
19
+
- The **Pages** tab helps you manage your on-call pages. From this tab, you can page [Datadog On-Call][4] teams to prompt them to join the incident response. This tab also shows a history of all pages sent, whether manually or through [Notification Rules][1], so that you can track which teams have been paged and when.
20
+
21
+
These tools ensure that both stakeholders and technical responders are promptly and reliably informed throughout the incident lifecycle.
15
22
16
23
## Add a notification
17
24
@@ -25,13 +32,22 @@ To create a manual notification:
25
32
1. Use the `{{incident.created}}` variable to customize your message timezone. This template variable will display the option to set your variable time zone.
26
33
1. Send your notification or save it as a draft.
27
34
35
+
## Trigger a page from an incident
36
+
37
+
To page a team or user using [Datadog On-Call][4]:
38
+
1. Navigate to the **Pages** tab of an incident.
39
+
1. Click **Page**.
40
+
1. Select the team or user you want to alert.
41
+
1. (Optional) Assign an incident role automatically to the person who acknowledges the page.
42
+
1. Click **Page**.
43
+
28
44
## View all notifications
29
45
30
46
{{< img src="/service_management/incidents/notification/incident_notifications_sent.png" alt="Notification tab of an incident showing example list of sent messages" style="width:90%;" >}}
31
47
32
48
The Notifications tab of an incident lists notifications as **Drafts** and **Sent**. Both lists display:
33
49
- The (intended) recipients of a notification.
34
-
- The contents of the notification’s message and any renotification messages that were sent.
50
+
- The contents of the notification's message and any renotification messages that were sent.
35
51
- When the notification was last updated.
36
52
- The original author of the notification.
37
53
@@ -45,7 +61,7 @@ For more information on how to configure a new notification rule, see the [Incid
45
61
46
62
## Message templates
47
63
48
-
Message templates are dynamic, reusable messages that can be used in [manual incident notifications](#add-a-notification), or automated [notification rules](#customize-notification-rules). Message templates leverage template variables, such as `{{incident.severity}}`, to dynamically inject the corresponding value from the incident that the notification is being sent for. Message templates have Markdown support so that incident notifications can include text formatting, tables, indented lists, and hyperlinks. Template variables are supported in both the message’s title and body.
64
+
Message templates are dynamic, reusable messages that can be used in [manual incident notifications](#add-a-notification), or automated [notification rules](#customize-notification-rules). Message templates leverage template variables, such as `{{incident.severity}}`, to dynamically inject the corresponding value from the incident that the notification is being sent for. Message templates have Markdown support so that incident notifications can include text formatting, tables, indented lists, and hyperlinks. Template variables are supported in both the message's subject and body.
49
65
50
66
For more information on how to create a message template, see the [Incident Settings][3] documentation.
51
67
@@ -56,3 +72,4 @@ For more information on how to create a message template, see the [Incident Sett
0 commit comments