Incident Enrichment

← Back to gallery

Incident Enrichment

Incident ManagementDatadogPagerDutySlackSpacelift

This Flow reacts to a PagerDuty incident the moment it triggers and gathers the context an on-call engineer would otherwise collect by hand: the most recent Spacelift runs on the affected service's stack (with how many minutes before onset each finished), Datadog events from the hour leading up to the incident, and the current state of Datadog monitors. It correlates everything into a single structured summary and posts it to the incident Slack channel, so triage starts with the likely causes already on screen. If any of the lookups fail, the error is reported to the same channel instead of failing silently.

After importing, connect the Flow to your systems: set the PagerDuty service ID on the incident trigger, the Spacelift stack ID in the runs query variables, the tag filter on the Datadog monitors block, and a SLACK_CHANNEL_ID secret with the channel to post to.

PagerDutyIncident Subscription

Incident Trigger

SpaceliftGraphQL Query

Fetch Spacelift Runs

DatadogSearch Events

Fetch Datadog Events

DatadogList Monitors

Fetch Datadog Monitors

Business logic (built-in)Transform

Build Incident Context

SlackSend Text Message

Post Incident Context

Errors (built-in)Handle Error

Catch Enrichment Errors

SlackSend Text Message

Post Enrichment Failure

Copy

Press enter or space to select a node. You can then use the arrow keys to move the node around. Press delete to remove it and escape to cancel.

Press enter or space to select an edge. You can then press delete to remove it or escape to cancel.