Skip to content

Commit e973dec

Browse files
estherk15cperrykdomalessi
authored
Add information about pages in incidents (#30837)
* Add information about pages in incidents * Small fixes * Apply suggestions from code review Co-authored-by: Chris Kirk <[email protected]> * Apply suggestions from code review Co-authored-by: domalessi <[email protected]> --------- Co-authored-by: Chris Kirk <[email protected]> Co-authored-by: domalessi <[email protected]>
1 parent 54b4917 commit e973dec

File tree

3 files changed

+35
-7
lines changed

3 files changed

+35
-7
lines changed

content/en/service_management/incident_management/declare.md

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ You can declare an incident from multiple places within the Datadog platform, su
1515

1616
In the [Datadog UI][1], click **Declare Incident** to create an incident.
1717

18-
The *Declare Incident* modal displays a collapsible side panel that contains helper text and descriptions for the severities and statuses used by your organization. The helper text and descriptions are customizable in [Incident Settings][2].
18+
The *Declare Incident* modal displays a collapsible side panel that contains helper text and descriptions for the severities and statuses used by your organization. The helper text and descriptions are customizable in [Incident Settings][2].
1919

2020
## From a monitor
2121

@@ -32,7 +32,7 @@ Incidents created from a monitor will inherit [field values][10] from the monito
3232
Declare an incident directly from a Cloud SIEM or Workload Protection signal side panel, by clicking **Declare incident** or **Escalate Investigation**. For more information, see [Investigate Security Signals][3].
3333

3434
Declare an incident from an App and API Protection signal through the actions listed in the signal side panel. Click **Show all actions** and click **Declare Incident**.
35-
For more information, see [Investigate Security Signals][4] for App and API Protection.
35+
For more information, see [Investigate Security Signals][4] for App and API Protection.
3636

3737
{{< img src="/service_management/incidents/declare/declare_asm.png" alt="Your image description" style="width:90%;" >}}
3838

@@ -58,6 +58,10 @@ Use the [Datadog Clipboard][6] to gather multiple monitors and graphs and to gen
5858

5959
{{< img src="service_management/incidents/declare/declare_clipboard.png" alt="Declare an incident from the Datadog Clipboard" style="width:90%;" >}}
6060

61+
## From a Datadog On-Call page
62+
63+
You can declare an incident directly from a [Datadog On-Call page][12]. From the [On-Call pages list][13], select a page and click **Declare Incident** to create an incident and automatically associate it with the relevant on-call team.
64+
6165
## From Slack
6266

6367
If you have the [Datadog integration enabled on Slack][7], you can declare a new incident with the slash command `/datadog incident` from any Slack channel.
@@ -100,3 +104,5 @@ You can declare an incident from individual Handoff Notification cards.
100104
[9]: https://app.datadoghq.com/incidents/settings?section=global-settings
101105
[10]: /service_management/incident_management/incident_settings/property_fields
102106
[11]: /service_management/incident_management/incident_settings/notification_rules
107+
[12]: /service_management/on-call/
108+
[13]: https://app.datadoghq.com/on-call/pages

content/en/service_management/incident_management/incident_settings/notification_rules.md

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,8 +19,12 @@ Use notification rules to:
1919

2020
1. Navigate to [Incident Settings Notification Rules][1].
2121
1. Click **New Rule**.
22-
2. Under **For incidents matching...**, select the incident property field `key:value` pairs you want notifications to be sent for. By default, these filters are empty, and a notification rule triggers for any incident.
23-
3. **Notify**: Select your notification recipients. Notifications can be sent to any of Datadog's existing [notification integrations][2]. If you want to notify a recipient's mobile device, select the option for their name that includes **(Mobile Push Notification)**. The recipient must have enabled notifications in the [Datadog mobile app][3] for this option to appear.
22+
1. Select the `key:value` pairs for the incident properties that should trigger a notification. By default, no filters are set, and a notification rule triggers whenever an incident is declared or its attributes are updated.
23+
1. Select your notification recipients.
24+
- Send notifications to any of Datadog's [supported notification integrations][2].
25+
- Notify [Datadog On-Call teams][4] using `@oncall-` handles.
26+
- To notify a recipient's mobile device, find their name and select the option that includes **(Mobile Push Notification)**. The recipient must have notifications enabled in the [Datadog mobile app][3] for this option to appear.
27+
- If you want to notify the incident Slack channel, use handle `@incident-slack-channel`.
2428
4. **With Template**: Select the desired message template you want the notification rule to use.
2529
5. **Renotify on updates to**: Select the incident properties that trigger notifications. A new notification is sent whenever one or more of the selected properties change. **Note**: properties already in your filters (see step 2) are automatically included in these rules.
2630
6. Click **Save**
@@ -39,3 +43,4 @@ You can perform the following operations to manage your notification rules.
3943
[1]: https://app.datadoghq.com/incidents/settings#Rules
4044
[2]: /monitors/notifications/?tab=is_alert#configure-notifications-and-automations
4145
[3]: /mobile/
46+
[4]: /service_management/on-call/

content/en/service_management/incident_management/notification.md

Lines changed: 20 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,14 @@ further_reading:
1111

1212
## Overview
1313

14-
All stakeholder notifications for an incident are consolidated in the incident’s Notifications tab. You can manually create, save as draft, and send notifications directly from this page. Automated notifications sent by [Notification Rules][1] for the incident in question are also listed in this section.
14+
15+
Effective incident response depends on notifying the right people at the right time. Datadog Incident Management provides two key ways to coordinate communication during an incident:
16+
17+
- The **Notifications** tab centralizes stakeholder communications. From here, you can create and send manual updates, save drafts, and view all automated messages triggered by [Notification Rules][1].
18+
19+
- The **Pages** tab helps you manage your on-call pages. From this tab, you can page [Datadog On-Call][4] teams to prompt them to join the incident response. This tab also shows a history of all pages sent, whether manually or through [Notification Rules][1], so that you can track which teams have been paged and when.
20+
21+
These tools ensure that both stakeholders and technical responders are promptly and reliably informed throughout the incident lifecycle.
1522

1623
## Add a notification
1724

@@ -25,13 +32,22 @@ To create a manual notification:
2532
1. Use the `{{incident.created}}` variable to customize your message timezone. This template variable will display the option to set your variable time zone.
2633
1. Send your notification or save it as a draft.
2734

35+
## Trigger a page from an incident
36+
37+
To page a team or user using [Datadog On-Call][4]:
38+
1. Navigate to the **Pages** tab of an incident.
39+
1. Click **Page**.
40+
1. Select the team or user you want to alert.
41+
1. (Optional) Assign an incident role automatically to the person who acknowledges the page.
42+
1. Click **Page**.
43+
2844
## View all notifications
2945

3046
{{< img src="/service_management/incidents/notification/incident_notifications_sent.png" alt="Notification tab of an incident showing example list of sent messages" style="width:90%;" >}}
3147

3248
The Notifications tab of an incident lists notifications as **Drafts** and **Sent**. Both lists display:
3349
- The (intended) recipients of a notification.
34-
- The contents of the notifications message and any renotification messages that were sent.
50+
- The contents of the notification's message and any renotification messages that were sent.
3551
- When the notification was last updated.
3652
- The original author of the notification.
3753

@@ -45,7 +61,7 @@ For more information on how to configure a new notification rule, see the [Incid
4561

4662
## Message templates
4763

48-
Message templates are dynamic, reusable messages that can be used in [manual incident notifications](#add-a-notification), or automated [notification rules](#customize-notification-rules). Message templates leverage template variables, such as `{{incident.severity}}`, to dynamically inject the corresponding value from the incident that the notification is being sent for. Message templates have Markdown support so that incident notifications can include text formatting, tables, indented lists, and hyperlinks. Template variables are supported in both the message’s title and body.
64+
Message templates are dynamic, reusable messages that can be used in [manual incident notifications](#add-a-notification), or automated [notification rules](#customize-notification-rules). Message templates leverage template variables, such as `{{incident.severity}}`, to dynamically inject the corresponding value from the incident that the notification is being sent for. Message templates have Markdown support so that incident notifications can include text formatting, tables, indented lists, and hyperlinks. Template variables are supported in both the message's subject and body.
4965

5066
For more information on how to create a message template, see the [Incident Settings][3] documentation.
5167

@@ -56,3 +72,4 @@ For more information on how to create a message template, see the [Incident Sett
5672
[1]: /service_management/incident_management/incident_settings/notification_rules
5773
[2]: /monitors/notify/variables/?tab=is_alert
5874
[3]: /service_management/incident_management/incident_settings/templates
75+
[4]: /service_management/on-call/

0 commit comments

Comments
 (0)