Create a Case

This product is not supported for your selected Datadog site. ().
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel, n'hésitez pas à nous contacter.

Overview

Cases can be created manually, automatically from across Datadog, or programmatically with the API. There are two types of cases: standard and security. Cases created from security signals and Sensitive Data Scanner are automatically made security cases. The security case type has all the features of the standard case type, along with a mandatory field for specifying the reason for closing a case (testing, false positive, or one time exception).

Manual case creation

  1. Navigate to the Case Management page.
  2. Select a project to create the case in. Note: A case can only belong to a single project.
  3. Click New Case.
  4. Fill in a title for the case.
  5. Select a case type.
  6. Add a title.
  7. (Optional) Add a description.
  8. Click Create Case to complete.

You can also create cases manually from the following products:

ProductInstructions
Monitors- On a monitor status page, optionally scope the monitor to a time frame and specific monitor group(s). Then, click the Actions dropdown menu and select Create a case.
- In Slack, click Create case under a monitor notification.
Security signalsClick into a Security Signal to open up the side panel. Click Escalate Investigation and select Create a case.
Error TrackingClick into an Error Tracking issue to open the side panel. Then, click Actions and select Create a case.
WatchdogClick into an alert to open its side panel. Click the Actions dropdown menu and select Create a case.
Event Management (raw events)Click into an event to open its side panel. Click the Actions dropdown menu and select Create a case.
Cloud Cost ManagementClick into a cost recommendation to open its side panel. Then, click Create case.
Sensitive Data ScannerClick Create case next to a Sensitive Data Scanner issue.
SlackClick the Create Case button under a monitor notification in Slack.

Automatic case creation

Configure the following products to automatically create cases:

ProductInstructions
MonitorsNavigate to the Project Settings page, click Integrations > Datadog Monitors, and click on the toggle to get your @case-<project_handle>.

When creating a monitor, include @case-{project_handle} in the Configure notifications and automations section. Cases are automatically created when the monitor transitions to a different status. To only create cases for certain monitor transitions, use conditional variables. As an example, to create cases only when a monitor triggers, wrap the @case mention with {{#is_alert}} and {{/is_alert}}.

Toggle on Auto-close cases when the monitor group resolves to reduce manual cleanup.
Event Management (Correlations)In Event Management, correlations configured to aggregate events from Datadog and third-party sources automatically create cases.
Workflow Automation1. In a new or existing workflow, add a step in the Workflow builder and search for “Case Management."
2. Select the Create Case action.
3. If the workflow is configured to run based on a monitor or security signal trigger, add the relevant workflow triggers and ensure that you’ve added the workflow handle to the desired resources. For more information, see Trigger a workflow.
Error TrackingIn Error Tracking, cases are automatically created when an issue is commented on or assigned.

Case types

Add case types when you are creating a case. Not all case types are available for configuration between manual and automativ creation. For example, only Standard, Security and Change Request, Event Management types are available when creating cases manually.

To add and enable custom case types, see Case Customization.

Case TypeDescription
StandardA general-purpose case for operational tasks, investigations, and more.
Change RequestUsed in change management workflows to track planned or approved changes.
Event ManagementIntegrated with the Event Management product to house correlated events.
SecurityUsed by security teams and products to manage investigations or alerts.
Error TrackingLinked to the Error Tracking product to track and remediate application issues.
Custom TypeAdd a custom case type. For more information, see Case Customization.

API

Create a case through the API endpoint.

Note: This endpoint requires the cases_write authorization scope.

Further Reading

Documentation, liens et articles supplémentaires utiles: