이 페이지는 아직 한국어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우
언제든지 연락주시기 바랍니다.Overview
A postmortem is a structured document that captures what happened during an incident, why it happened, and what actions to take to prevent recurrence. Generating a postmortem after an incident helps your team:
- Document root cause and impact for future reference
- Drive accountability for remediation work
- Build organizational knowledge to reduce the frequency and severity of future incidents
Datadog automatically populates postmortems with incident data using templates you define. You can generate postmortems to Datadog Notebooks, Confluence, or Google Drive. Postmortems generated as Datadog Notebooks embed directly in the Post-Incident tab, where you can view, edit, and track their status and ownership without leaving the incident.
Permissions
- To generate a postmortem, you need the Incidents Write permission.
- To view a generated postmortem in Datadog Notebooks, you need the Notebooks Read permission.
For private incidents, postmortems generated in Datadog Notebooks are accessible to any user with Notebooks read permission, regardless of whether they have access to the private incident. Take this into consideration when generating postmortems for incidents that contain sensitive data.
Generate a postmortem
After an incident is resolved, you can generate a postmortem from the incident’s Post-Incident tab.
To generate a postmortem:
- Open the incident and go to the Post-Incident tab.
- Select a postmortem template.
- Click Generate Postmortem. Datadog creates the postmortem in the destination configured in the template and links it to the incident.
After generating a postmortem:
- Datadog Notebooks: The postmortem embeds directly in the Post-Incident tab.
- Confluence or Google Drive: A link appears in the Post-Incident tab. Click the link to open the document in the configured destination.
View and edit a postmortem
Postmortems generated as Datadog Notebooks embed directly in the Post-Incident tab. You can read and edit the postmortem without leaving the incident view. Changes made in the embedded view are reflected in the underlying notebook.
Multiple users can edit an embedded postmortem at the same time. Cursor markers show where each user is working. You can also add inline comments from within the embedded view.
Postmortem status and owner
Postmortems have two fields to help track completion and drive accountability:
| Field | Description | Default |
|---|
| Status | The current completion state of the postmortem. | Draft |
| Owner | The person responsible for completing the postmortem. | The user who generated the postmortem |
The postmortem status values are:
| Status | Description |
|---|
| Draft | The postmortem is in progress. |
| In Review | The postmortem is ready for review. |
| Completed | The postmortem is finished. |
The postmortem owner can be reassigned to any user in your Datadog organization. The owner is a system role that appears in the incident’s response team alongside Incident Commander and Responder.
Configure postmortem templates
To create or manage postmortem templates, including save location and template variables, see Templates.
Attach an existing postmortem
If a postmortem for an incident already exists outside of Datadog, or was created before the incident was opened, you can link it directly from the Post-Incident tab without generating a new one. The linked postmortem can be any URL—a Datadog Notebook, a Confluence page, a Google Doc, or any external document.
To attach an existing postmortem, open the Post-Incident tab and use the Attach existing post-mortem option to add the link.
Remove a postmortem
To remove a postmortem from an incident, open the Post-Incident tab, find the postmortem entry, and select the option to remove it. Removing the link does not delete the underlying document.
Further reading
