Incident Collaboration
Solve incidents faster with All Quiet
Explore how to manage incidents in All Quiet, including filtering, sorting, and searching, plus team collaboration techniques. This guide, focusing on the web app, mirrors the functionality you’ll find in our mobile apps,
Incidents Overview
Open Incidents
. Per Default, it shows all open
incidents of your teams.
Filtering and Sorting incidents
You can filter, sort and search incidents within All Quiet. We automatically save your filter settings.
Sorting incidents
By default, incidents are sorted by Urgency
. You can change this to Latest interaction
, Created
or Title
by clicking on Urgency
.
Filtering incidents
You can filter the list of incidents based on:
- Status:
Open
orResolved
- Severity:
Critical
,Warning
orMinor
- Team: Choose between all of your teams here
- Integration: Choose between all of your integrations here
- On-Call / Assigned Users: Display only incidents where the selected users were on-call in the assigned teams during the last interaction or those assigned to specific users (available only with Organizations).
To filter any of these, click on the attribute you’d like to filter and choose what you’d like to filter for.
In this example, we are filtering for open
incidents with severity Warning
from team My First Team
and integration Datadog PROD
:
Text search for incidents
All Quiet allows you to do a text search for incidents in title
and attributes
. Just write what you’re looking for in the text field Search in title and attributes
and hit ENTER to see the resulting incidents.
Filter for On-Call / Assigned Users
Use the “On-Call / Assigned Users” filter to display only incidents assigned to specific users (available only for Organizations) or incidents where certain users are currently on-call in the assigned teams based on the last interaction.
Include Snoozed Incidents
Per default, snoozed incidents are hidden. If you change the view from Hide Snoozed
to Include Snoozed
, the incident overview will display snoozed incidents as well, identified by a Snooze symbol.
Unsnooze the incident to inform your on-call colleagues about this incident.
Manually create an incident
Sometimes, your integrations are quiet, but you still find an incident. That’s why we added the option to manually create incidents.
- Select
Incidents
in the sidebar of the Web App. - Click
+ Create Incident
.
Add the incident details
- Add a
Status
for the incident. - Add
Severity
. - Add a
Title
. - Select one of your Organizations or “No organization”. Depending on your selection, you will see the related Teams and Users below.
Only visible for users of organizations.
- Select the
Team
you want to create the incident in. After creation, on-call team members will be notified. If you selected an Organization in step 4, you can select(No Team)
, but than have to assign the incident to at least one specific user in step 7. - Based on the selected team, you can add an
Inbound Integration
. If it’s a general incident that isn’t realted to any integration, select(No Integration)
orAll Quiet
. - If you selected an Organization in step 4, you can assign the incident to one of your Organizations specific users and notify them, regardless if they are currently on-call or not. This is great if you need one specific person to be notified about an issue.
Only available for users of organizations.
- If the incident directly affects the functionality of one of your services, you can flag this, here. Only visible for users of status pages.
- Optionally, you may add some notes to further describe the incident.
- Select if you want to share your comment with the subscribers of the status pages attached to your service.
Only visible when selecting at least one service in step 8.
- Create the incident.
After creation, the incident is added to the incidents overview and behaves exactly as the incidents that are automatically created from your inbound integrations. You can perform the same actions and workflows for both types of incidents.
Quick Actions
Resolving
- To resolve an open incident click the green
Resolve
button. This will notify all colleagues of the current escalation tier that the incident was resolved. Always stops any auto-escalations.
Investigating
- In case you’ve been notified of an open incident, and you can tell you’re team that you’re looking into the incident by clicking the blue
Investigate
button. This will notify all colleagues of the current escalation tiers that you’re investigating the issue. It will also mark the incident as acknowledged. Auto-escalations are stopped if your settings say “Stop Auto-Escalation” if “Incident is acknowledged”.
Escalating
- In case you need help from your colleagues, you can escalate the incident to the next escalation tier by clicking the red
Escalate
button. This will notify all colleagues of the current escalation tiers as well as the following escalation tier. This action re-initiates / sustains auto-escalations.
Action with Comment
In case you want to add a comment to your action, select Comment
.
An overlay opens.
- Select the Action you would like to perform.
- Comment: Simply add a comment with context. Marks the incident as acknowledged. Auto-escalations are stopped if your settings say “Stop Auto-Escalation” if “Incident is acknowledged”.
- Investigate: For more info, see section Investigating.
- Escalate: For more info, see section Escalating.
- Resolve: For more info, see section Resolving.
- Reopen: Only visible if an incident is in state
resolved
. For more info, see section Reopening Incidents.
- Add your comment.
Only visible for users of status pages and if the incident is currently affecting at least one Service.
- You can decide whether you want to publicly share the comment on your Status Pages.
- Comment
Next, you will see the action plus the comment in your incident history.
Public
flag.Advanced Actions
Special operations are forwarding (1), affecting (2), assigning (3), manually unsnoozing (4) and archiving (5) incidents.
Forwarding
You can manually forward
single incidents to your team’s Outbound Integrations. First, click “Forward”.
Forward
button if you activated the Triggers Only On Forwarded
feature for at least one Outbound Integration. Else, we will automatically forward incidents to your outbound integrations. The setup can defined in each integration’s details page.After clicking Forward
in the incidents details view, you can select the outbound integration you want to forward the issue to. Incidents can always be forwarded, even after they are resolved.
Affects Services
With the Affects
action, you can easily connect incidents with your services and status pages, allowing you semlessly share downtime and incident updates with your customers, allowing you to fully focus on fixing the issue whilst having everyone onboard.
After clicking Affects
in the incidents details view, an overlay opens.
- Select the Services affected by the incident. The affect action itself will always automatically update your services and status pages, as it’s only reason is to make sure incidents are shared with your customers.
- In case you prepared Message Templates for the affected service, you will find them here and can select them per click.
- Optionally, you may add a comment. Here, we used the template.
- You can decide whether you want to publicly share the comment on your Status Pages.
- Click
Affect
.
Next, you will see the action in your incident history.
If your decided to publicly share a comment, we will add a litte Public
flag.
By marking the incident as affecting, it will also be diplayed on your status pages.
- See the incident that we marked as affecting for service
Cloud Infrastructure
. - The comment that we decided to share publicly.
- Please note that the incident severity (Critical, Warning or Minor) also has an impact on how the incidents are displayed in the status graph. You can change the public description of the severity in the public appearance section of your status page.
Assign
Assign
action to assign an incident to teams, specific users, or both.
After clicking Assign
in the incident’s detail view, an overlay will open.
Assign to Team
Do you need help from an additional team to resolve an incident? Or do you want to reassign the incident to another team better suited to handle it?
- After clicking the
Assign
button, you will see all teams in your organization. Select the teams you want to assign the incident to. You can either add teams to the currently assigned ones or reassign the incident to entirely different teams. - Confirm with
Assign
to reassign the incident to the selected team(s). All involved on-call members of the all assigned teams will be notified about the incident.
On the incident details view
- You can see the assign action in the history.
- You can view which team(s) is/are currently in charge of the incident.
- You can see the currently notified escalation tiers for each team.
Assign to User
Need assistance from a specific colleague? No worries! With the Assign to User
action, you can notify them anytime.
- Click the Assign button to view all users in your organization and select the user(s) you want to assign the incident to. You can either add them to the existing assigned teams and users or reassign the incident to different users entirely (see screenshot below).
- Confirm with
Assign
to reassign the incident to the selected users(s). The selected user(s) will be notified about the inciden, no matter if they are on-call or not.
On the incident details view
- You can see the assign action in the history. Not that the incident was assigned to one specific user and isn’t assigned to any teams anymore.
- You can view which users(s) is/are currently in charge of the incident. If the incident is assigned to several teams and / or users, all notified colleagues are listed, here.
- Since only one user is now responsible, with no teams assigned, auto-escalations are halted.
Manually Unsnooze
This action is only available if you have activated the snooze settings for your integration and the incident is currently in the snooze window.
As soon as you click the Unsnooze
button, the snooze window ends.
- The incident get’s unsnoozed.
- Tier 1 members get notified about the incident.
- The incident get’s flagged as
not acknowledged
and any potential auto-escalations start.
Archiving
If you want to clean up your incidents overview, you can archive
incidents. Archiving incidents does not change their resolution state, only moves them from the incidents overview to the archive.
Archive
Intent- You can always open the archive via the sidebar navigation.
- Archive view —> All archived incidents.
- Archived incidents can always be
Unarchived
. Then, they will be visible on the incidents overview, again.
Reopening Incidents
Sometimes you need to re-open an incident that is already marked as resolved. You can simply do this by clicking the red Reopen
button on a resolved incident.
You can also add a comment.
Reopening an incident will inform the current Tier 1 on-call users of the involved teams. It will also restart the auto-escalations of the involved team(s).
Incident History
The “History” section in the incident details transparently shows you all details of the incident response. It is split in 4 sections.
- Events (1)
- On-Call Users (2)
- Teams (3)
- Whether the incident was already acknowledged or not (4)
History - Events
This section chronologically lists all events related to an incident. It also shows the user, routing rule or integration that created the event.
History - On-Call
Shows all users that were on-call during the related event. The rotations, escalation tiers as well as any personal overrides that were active at the event are taken into account. If events happen during maintenance windows or while the integration is muted, we don’t show any on-call users as nobody is notified.
History - Teams
For each incident event, we list the teams and their specific escalation tiers that got notified about the event.
History - Acknowledged
Shows the events that marked an incident as acknowledged or not acknowledged.
After an incident is Created
, Tier 1 members are alerted and, if configured in your on-call schedule, auto-escalations start.
After somebody Investigates
, Comments
, Archives
or Resolves
an incident, is gets marked as acknowledged.
If your settings stop auto-escalations if incident is acknowledged, any potential auto-escalations are stopped. If your settings stop auto-escalations if incident is resolved, any potential auto-escalations are only stopped if somebody Resolves
an incident.
For a previously acknowledged incident, Escalating
, Reopening
or Assigning
it to a new / extra team re-marks the incident as not acknowledged and reactivates any potential auto-escalations.
The actions Affects
, Forward
and Unarchive
have no influence on the current acknowledgement state and, therefore, on your auto-escalations.
Incident Grouping
Are you experiencing a cascade of connected alerts for certain incidents that occur in your system? Our incident grouping feature helps cut through the noise, keeping your team focused on resolving the issue. Easily consolidate multiple related incidents into a single event by matching key attributes, streamlining collaboration and speeding up resolution.
To enable this functionality, you must first configure grouping in the payload mapping section of your integration. Learn how to do this using isGroupingKey
here.
Once set up, incidents with matching values for the defined grouping key attributes will be grouped.
On the incident overview, grouped incidents can be identified by a little label that includes a count of the number of incidents grouped in this incident.
On the incident details view
- You can view the overall state of the entire incident group. The group remains open until all incidents within it are resolved or until it is manually resolved.
- Grouping is determined by the criteria set using
isGroupingKey
in the incident mapping of the integration. As long as the incident group remains open, any new incidents matching the defined criteria (e.g., attributeUTM
= 333) will be added to the group. Exception: When using groupingWindowInSeconds, new incidents will only be grouped as long as they are created within the definedgroupingWindowInSeconds
. After the window has ended, incidents will create new groups and alert your on-call colleagues again. - You can see all single incidents that are part of the group with their status & attributes.
- The history of the incident group. The first incident with a grouping attribute creates the group and starts auto-escalations. All collaboration takes part on group level, no seperate alerting for new incidents - this reduces the noise and keeps the focus on resolution. After the group is resolved, the next matching incidents will create a new incident group. Exception: When using groupingWindowInSeconds, new incidents that come in during the window will reopen a previously resolved group.
Was this page helpful?