Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 11 additions & 6 deletions config/_default/menus/main.en.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -100,35 +100,40 @@ menu:
url: getting_started/devsecops
parent: getting_started
weight: 10
- name: Event Management
identifier: getting_started_event_mgmt
url: getting_started/event_management/
parent: getting_started
weight: 11
- name: Incident Management
identifier: getting_started_incident_management
url: getting_started/incident_management/
parent: getting_started
weight: 11
weight: 12
- name: Integrations
identifier: getting_started_integrations
url: getting_started/integrations/
parent: getting_started
weight: 12
weight: 13
- name: AWS
identifier: getting_started_with_aws
url: getting_started/integrations/aws/
weight: 1201
weight: 1301
parent: getting_started_integrations
- name: Azure
identifier: getting_started_with_azure
url: getting_started/integrations/azure/
weight: 1202
weight: 1302
parent: getting_started_integrations
- name: Google Cloud
identifier: getting_started_with_google_cloud
url: getting_started/integrations/google_cloud/
weight: 1203
weight: 1303
parent: getting_started_integrations
- name: Terraform
identifier: getting_started_with_terraform
url: getting_started/integrations/terraform/
weight: 1204
weight: 1304
parent: getting_started_integrations
- name: Internal Developer Portal
identifier: getting_started_internal_developer_portal
Expand Down
74 changes: 74 additions & 0 deletions content/en/getting_started/event_management/_index.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,74 @@
---
title: Getting Started with Event Management Inbox
further_reading:
- link: "/service_management/events/ingest//"
tag: "doc"
text: "Send events to Datadog"
- link: "/service_management/events/correlation/"
tag: "doc"
text: "Learn more about event correlation"
- link: "https://www.datadoghq.com/blog/datadog-event-management/"
tag: "Blog"
text: "Aggregate, correlate, and act on alerts faster with AIOps-powered Event Management"
---

## Overview

Datadog Event Management Inbox helps correlate events from any source into actionable insights, enabling teams to contextualize investigations with events from Watchdog, Datadog Monitors, integrations, third-party tools, changes, and more - alongside related telemetry by the Datadog Agent. By consolidating these insights, teams can streamline incident response and improve operational efficiency.

Check notice on line 17 in content/en/getting_started/event_management/_index.md

View workflow job for this annotation

GitHub Actions / vale

Datadog.sentencelength

Suggestion: Try to keep your sentence length to 25 words or fewer.

Event Management provides a centralized inbox that helps teams efficiently triage, investigate, and resolve incidents. Users can quickly preview related events, identify root causes, and take appropriate actions. Filtering and sorting options allow teams to focus on the most critical cases, while collaboration features like tagging and case merging ensure seamless teamwork. An AI-powered correlation engine groups related events into cases, reducing alert fatigue and helping teams work with a manageable number of high-value incidents.

Check warning on line 19 in content/en/getting_started/event_management/_index.md

View workflow job for this annotation

GitHub Actions / vale

Datadog.words

Use '' instead of 'quickly'.

## Key Features

Check warning on line 21 in content/en/getting_started/event_management/_index.md

View workflow job for this annotation

GitHub Actions / vale

Datadog.headings

'Key Features' should use sentence-style capitalization.

### Case Triage and Investigation

Check warning on line 23 in content/en/getting_started/event_management/_index.md

View workflow job for this annotation

GitHub Actions / vale

Datadog.headings

'Case Triage and Investigation' should use sentence-style capitalization.

- **Inbox for Centralized Triage:** View and manage all incoming cases in a single location.
- **Related Events and Metrics**: Gain insights into correlated logs, metrics, and alerts.
- **Root Cause Identification:** Preview linked cases to diagnose incidents.
- **Bulk Actions:** Apply updates to cases by changing their priority, assigning them to team members, or escalating multiple cases at once.

## Getting Started

Check warning on line 30 in content/en/getting_started/event_management/_index.md

View workflow job for this annotation

GitHub Actions / vale

Datadog.headings

'Getting Started' should use sentence-style capitalization.

1. Navigate to **Service Management** → **Event Management** → **Inbox**.
2. Click **Show Control** to display current case statuses such as **Open**, **In Progress**, **Closed**, **Archived**. To minimize the left-hand case status panel, click **Collapse.**
3. Select between a **structured table layout** or a **split view** for contextual details alongside case information.
4. Use the **sort toggle** to organize your inbox to by high-urgency cases, status, or creation date.
5. Apply bulk actions to update multiple cases at once by changing priority, assigning cases, or escalating issues while triaging.
6. Take action by claiming the case, merging similar cases, or split unrelated alerts to maintain an organized investigation.
7. Tag teammates, comment on cases, or copy case links to share in Slack, Teams, or incident threads.
8. View related events and metrics relative to the current case.
9. Click to Declare an Incident, Create a Jira Issue or Create a Service Now Incident, or run a Workflow.

Check warning on line 40 in content/en/getting_started/event_management/_index.md

View workflow job for this annotation

GitHub Actions / vale

Datadog.tense

Avoid temporal words like 'Now'.
10. When the issue is resolved, the system automatically closes the case, or you can manually mark it as resolved.

With Datadog Event Management, teams can improve operational efficiency by reducing time spent on even correlations and triage, ensuring faster and more effective incident resolution.

### View and Navigation

Check warning on line 45 in content/en/getting_started/event_management/_index.md

View workflow job for this annotation

GitHub Actions / vale

Datadog.headings

'View and Navigation' should use sentence-style capitalization.

- **Configurable Views:** Filter inbox to show high-urgency cases or specific statuses, such as only P1/P2 cases, Status, or Created at.
- **Table and Split Views:** Choose between a structured table layout or a split view for contextual details.
- **Sorting and Filtering:** Organize cases by priority, severity, or custom attributes.
- **Collapsible Panel:** Maximize screen space for better efficient case management.
- **Keyboard Shortcuts:** Navigate quickly with shortcuts.

Check warning on line 51 in content/en/getting_started/event_management/_index.md

View workflow job for this annotation

GitHub Actions / vale

Datadog.words

Use '' instead of 'quickly'.

### Collaboration and Insights

- **Tagging and Comments:** Collaborate with teammates by tagging users and assigning cases.
- **Related Case Previews:** Quickly access linked cases for comprehensive investigations.
- **Historical Context:** Review past events and resolutions to improve future responses.

### Merging & Splitting Cases

Check warning on line 59 in content/en/getting_started/event_management/_index.md

View workflow job for this annotation

GitHub Actions / vale

Datadog.headings

'Merging & Splitting Cases' should use sentence-style capitalization.

- **Merging Cases:** Combine duplicate or related cases for more efficient tracking.
- **Splitting Cases:** Separate cases when multiple unrelated alerts are grouped together.

### Case Closure & Resolution

Check warning on line 64 in content/en/getting_started/event_management/_index.md

View workflow job for this annotation

GitHub Actions / vale

Datadog.headings

'Case Closure & Resolution' should use sentence-style capitalization.

- **Auto-Closure:** Cases automatically resolve when all related alerts recover.
- **Manual Closure:** Users can manually mark a case as resolved if remediation has been applied.
- **Case sharing:**
- Copy cases links to share in Slack, Teams, or incident threads.
- Open cases in a new tab for side-by-side investigations.

## Further Reading

{{< partial name="whats-next/whats-next.html" >}}
Loading