Incident management in Grafana IRM

Effective incident management is crucial for minimizing service disruption and ensuring prompt resolution. Grafana IRM provides a comprehensive set of tools to help teams coordinate their response efforts, document incidents, and resolve issues efficiently.

Key incident response capabilities

Grafana IRM offers several essential capabilities to support your incident response process:

Incident declaration: Quickly create incidents from anywhere in Grafana, Slack, or via API
Timeline documentation: Maintain a chronological record of observations, metrics, and decisions
Team collaboration: Add participants, assign roles, and track responsibilities
Task management: Create, assign, and track action items throughout the incident lifecycle
Integration with tools: Connect with monitoring, alerting, and communication systems
Post-incident analysis: Review incident timelines to identify improvement opportunities

Incident management workflow

Stage	Description	Key features
Declare	Create an incident record	Declaration methods, severity levels, labeling
Document	Maintain a record of the incident	Timeline, notes, queries, dashboard panels
Collaborate	Work together to resolve the incident	Add participants, roles, Slack integration
Resolve	Track and complete action items	Task management, status updates

In this section

Declare an incident: Learn how to create incidents from various entry points
Use the incident timeline: Document the incident chronologically with notes, queries, and dashboard panels
Add and manage participants: Invite team members and manage their participation
Manage incident tasks: Create and track action items throughout the incident

Additional incident management interfaces

Beyond the Grafana IRM UI, you can interact with incidents through:

Slack integration: Manage incidents directly from Slack using /grafana commands
Grafana IRM API: Programmatically create, update, and interact with incidents