Event Management Triage Inbox
This product is not supported for your selected
Datadog site. (
).
Overview
Datadog Event Management Triage Inbox simplifies incident response by consolidating related events from any source into actionable work items. This centralized view reduces noise and helps teams triage, investigate, and collaborate more effectively. With customizable saved views, you can stay focused on high-priority work items and review correlated alerts, related changes, and telemetry, all in one place.
Triaging and investigating work items
Work item triage and investigation begins in the Triage Inbox, where you can sort, filter, and manage incoming work items. Collaborate with teammates, both within and outside of Datadog, to coordinate responses. From there, you can prioritize, assign, investigate, and escalate work items as needed to drive faster resolution.
Getting Started
- Navigate to Event Management > Triage Inbox.
- Select a project from the left-hand panel to display out-of-the-box status views such as Open, In Progress, Closed, and Archived.
- Use the display settings icon to choose between split view (for detailed work item investigation) or table view (for bulk work item review and column configuration). Customize your inbox ranking with the Sort By dropdown-options include Priority, Created at, or Last Updated. Click Save to re-use your customized inbox for future use.
- Update the status, priority, and assignment directly on work item cards during triage.
- Maximize screen space by collapsing the left-hand work item project panel and the Datadog navigation bar.
- Hover over the work item card alert count to preview correlated alerts.
Next Steps
Now that you’ve learned how to triage and investigate work items, use these tools to collaborate with your team, take action on root causes, and streamline response efforts.
Collaborate and Integrate
On the right hand split-view side panel, you can perform the following:
Tag and comment: Collaborate with teammates in the work item timeline by tagging users and adding notes.
Send notifications: Alert stakeholders with Slack, Microsoft Teams, email, or webhooks.
Escalate issues: Trigger an incident or page an on-call responder using Incident Management, On-Call, Workflow Automation, or third-party tools.
Sync with external tools: Keep Jira and ServiceNow records in sync to ensure external stakeholders stay up to date.
Take Action
- Mark root cause: Identify and mark a related event, such as a faulty change, as the root cause.
- Run workflows: Execute remediation runbooks manually or trigger them conditionally with Work Item Automation Rules.
- Merge work items: Combine related work items to streamline investigations.
- Split work items: Separate alerts that require individual investigation.
Note: When all alerts in a work item are resolved, the system automatically closes the work item. You can also manually mark a work item as resolved.
Further Reading
Additional helpful documentation, links, and articles:
