Incident Details¶

The Incident Details page is a comprehensive page for viewing and handling a single incident. Here, you can understand incident details, perform status operations, analyze associated data, and collaborate with your team.

The top of the Incident Details page displays the core information of the incident, including the incident level (P0/P1/P2, etc., automatically set by the monitor and cannot be manually modified), current status and start time, incident title, trigger time, and duration.

Status Management¶

An incident is initially in the open state. You can actively "Claim this incident". After claiming, the status automatically changes to working, and you become the handler. The handler can mark the incident as resolved or closed. Only the current handler can change the incident status; other members can reclaim an incident in the working state to take over handling. On the right side of the page, the system displays a timeline of key milestones for you, including handling progress, status changes, escalation notifications, etc.

Incident Details¶

When entering the details page, the "Incident Details tab" is displayed by default. In addition to information like Incident Status, the default open page shows you the event error distribution chart associated with the current incident, and the anomaly description (detection dimensions, source, time content, supplementary information, etc.).

Operation Records¶

In the Incident Details page, you can view the complete handling history of this incident through the "Operation Records" entry. The system clearly displays all key operations in reverse chronological order, including incident triggering, status changes, level adjustments, handler transfers, and escalation notification executions, helping you stay updated on the latest progress and trace the complete handling process.

Collaboration Records¶

You can use the comment function at the bottom of the page for team collaboration within the current details page, supporting adding text, links, or uploading attachments.

All collaboration content is summarized in the Collaboration Records section. The system automatically logs the complete operation history, including incident triggering, status changes, Operation Records, handler adjustments, and escalation notifications, forming a clear audit trail for subsequent tracking and review.

Associated Events¶

In the "Associated Events" tab of the Incident Details page, the system centrally displays all monitoring events related to this incident. These events are automatically associated based on the same detection dimensions and, by default, show data from the 2 hours before and after the incident occurred.

Here you can view:

• The occurrence time, source, and specific content of events
• The detection metrics and description information associated with the events
• The distribution of events (visually presented through a time histogram)

Clicking on any event or a time interval in the distribution chart will jump to the corresponding analysis page with the current filter conditions applied, allowing you to further view detailed logs, metric trends, or trace information to assist in locating the root cause of the incident or assessing the impact scope.

Associated Data Analysis¶

The system automatically associates and displays relevant data based on the incident's detection dimensions to help you locate the problem:

• If the incident involves a service, relevant error traces, service dashboards, dependency topology, and logs will be displayed.

• If it involves an application, error user access lists and analysis dashboards for the corresponding types (Web / Mobile, etc.) will be displayed.

• If it involves a host, monitoring metrics, error logs, processes, containers, and network views will be displayed.

All data views by default focus on the 2 hours before and after the incident occurred. You can quickly understand the impact situation through the distribution chart and click to jump to the corresponding page for in-depth analysis.

Further Reading¶