Triage and Notify

이 페이지는 아직 한국어로 제공되지 않으며 번역 작업 중입니다. 번역에 관한 질문이나 의견이 있으시면 언제든지 저희에게 연락해 주십시오.
Case detail page with an event side panel. Investigate correlated events from a case and analyze related metrics

Event Management correlates related events and automatically consolidates them into a single case. Bring in all the context of related logs, related metrics, and alerting monitors to triage and troubleshoot issues in one place.

From the Correlation page, find the pattern you want to analyze and click Triage Cases at the end of the same row. You can also click Case Management at the top of the page to view all cases with correlated events in Case Management. Datadog pulls in related metrics and logs so you can troubleshoot issues with all the related data in one place.

Event Management Case

Case detail page - Overview
FeatureDescription
Priorityhighest priority of correlated alerts
Attributetags from correlated events. user updates won’t get overriden by the engine
Statusautomatically managed by system, user updates will get overriden by system. Cases will auto resolve when all of the underline alerts recover and automatically reopen when any alert is re-triggered during the maximum alive time window
Deletionselect the checkbox on the alert to delete any irrelevant alerts, deleted alerts won’t get correlated again
Enriched Alertssome cases will get automatically enriched with intelligent alerts that Datadog thinks are related based on your infrastructure. Enriched alert do not impact case attribute, priority, and status

For more information on Case Management operations, see the Case Management documentation.

Investigation

  1. From the case Overview, click Investigation
  2. Under the Correlations section, you can see a list of alerts and events
  3. Click into any of the alerts or events to view all related metrics and logs in context of the alert
  4. (Optional) Select any alerts or events you want to remove that are not related to the case
  5. Under the Related Metrics section, compare all related metrics or group by tags

Create a notification or ticket

With correlated events, you can configure one notification for a group. So, instead of having 20 notifications and 20 potential issues to investigate, you have one single case and one notification. Combine all your alerts in the Case Management Projects page. There are a few ways to group notifications in Case Management:

Ticketing

On the Project Settings page, configure the Integrations you want your projects to send notifications to. Datadog supports the following integrations with manual and automatic ticket creation, and bi-directional syncing:

  • ServiceNow
  • Jira

For setup instructions, see the Case Management Settings documentation.

Notifications

In case management, views group cases based on a configured query. You can set up a notification when a case matching this query is created. Datadog supports, Pagerduty, Email, Webhook, Microsoft Teams, and Slack. To learn how to create a view, see the Case Management Views documentation.

Note: You need to reconfigure underlying monitors to remove multiple notifications. Grouping monitor events does not mute individual notifications.