--- title: Create a Work Item description: Datadog, the leading service for cloud-scale monitoring. breadcrumbs: Docs > Incident Response > Work Management > Create a Work Item --- > For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt). # Create a Work Item ## Overview{% #overview %} Work items can be created manually, automatically from across Datadog, or programmatically with the API. There are two types of work items: standard and security. Work items created from security signals and Sensitive Data Scanner are automatically made security cases. The security work type has all the features of the standard work type, along with a mandatory field for specifying the reason for closing a work item (testing, false positive, or one time exception). ## Manual work item creation{% #manual-work-item-creation %} 1. Navigate to the [Work Management page](https://app.datadoghq.com/work). 1. Select a project to create the work item in. **Note**: A work item can only belong to a single project. 1. Click **New Work Item**. 1. Fill in a title for the work item. 1. Select a work type. 1. (Optional) Add a description. 1. Click **Create Work Item** to complete. You can also create work items manually from the following products: | Product | Instructions | | ----------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Monitors | - On a [monitor status page](https://docs.datadoghq.com/monitors/status.md), optionally scope the monitor to a time frame and specific monitor group(s). Then, under **More Actions**, click **Create a work item**.- In Slack, click **Create work item** under a monitor notification. | | Security signals | Beside a signal, in the **Cases** column, click the **Create Case** icon. Then, enter the work item details in the **Create Case** window that opens. | | Error Tracking | Click into an Error Tracking issue to open the side panel. Then, click **Actions** and select **Add a work item**. | | Watchdog | Click into an alert to open its side panel. Click the **Actions** dropdown menu and select **Create a work item**. | | Event Management (raw events) | Click into an event to open its side panel. Click the **Actions** dropdown menu and select **Create a work item**. | | Cloud Cost Management | Click into a cost recommendation to open its side panel. Then, click **Create a work item**. | | Sensitive Data Scanner | Click **Create case** next to a Sensitive Data Scanner issue. | | Slack | Click the **Create Work Item** button under a monitor notification in Slack. | ## Automatic work item creation{% #automatic-work-item-creation %} Configure the following products to automatically create work items: | Product | Instructions | | ------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Monitors | Navigate to the [Project Settings page](https://app.datadoghq.com/work/settings), click **Integrations** > **Datadog Monitors**, and click on the toggle to get your @case-.When creating a monitor, include `@case-{project_handle}` in the **Configure notifications and automations** section. Work items are automatically created when the monitor transitions to a different status. To only create work items for certain monitor transitions, use [conditional variables](https://docs.datadoghq.com/monitors/notify/variables.md?tab=is_alert#conditional-variables). As an example, to create work items only when a monitor triggers, wrap the `@case` mention with `{{#is_alert}}` and `{{/is_alert}}`.Toggle on **Auto-close work items when the monitor group resolves** to reduce manual cleanup. | | Event Management (Correlations) | In Event Management, correlations configured to aggregate events from Datadog and third-party sources automatically create work items. | | Workflow Automation | 1. In a new or existing workflow, add a step in the Workflow builder and search for "Case Management."2. Select the **Create Case** action.3. If the workflow is configured to run based on a monitor or security signal trigger, add the relevant workflow triggers and ensure that you've added the workflow handle to the desired resources. For more information, see [Trigger a workflow](https://docs.datadoghq.com/actions/workflows/trigger.md). | | Error Tracking | In Error Tracking, work items are automatically created when an issue is commented on or assigned. | ## Work types{% #work-types %} Add work types when you are creating a work item. Not all work types are available for configuration between manual and automatic creation. For example, only `Standard`, `Security` and `Change Request`, `Event Management` types are available when creating work items manually. To add and enable custom work types, see [Work Management Customization](https://docs.datadoghq.com/incident_response/work_management/customization.md). | Work Type | Description | | ---------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Standard | A general-purpose work item for operational tasks, investigations, and more. | | Change Request | Used in change management workflows to track planned or approved changes. | | Event Management | Integrated with the Event Management product to house correlated events. | | Security | Used by security teams and products to manage investigations or alerts. | | Error Tracking | Linked to the Error Tracking product to track and remediate application issues. | | Custom Type | Add a custom work type. For more information, see [Work Management Customization](https://docs.datadoghq.com/incident_response/work_management/customization.md). | ## API{% #api %} Create a work item through the [API endpoint](https://docs.datadoghq.com/api/latest/case-management.md#create-a-case). **Note**: This endpoint requires the `cases_write` authorization scope. {% alert level="info" %} The Work Management API endpoints use `case-management` terminology, which reflects the product's previous name. {% /alert %} ## Further Reading{% #further-reading %} Additional helpful documentation, links, and articles: - [View and Manage Work Items](https://docs.datadoghq.com/incident_response/work_management/view_and_manage.md) - [Work Management Customization](https://docs.datadoghq.com/incident_response/work_management/customization.md)