The PagerDuty Operations Console offers live visibility into incidents where users can create customized views to triage and take immediate action on issues. This feature provides central IT teams and technical stakeholders with context on their technical environment at a glance to be able to more effectively and efficiently triage incidents, minimizing their MTTA and MTTR.

📘

Availability

This feature is available with our PagerDuty AIOps add-on. If you would like to sign up for a trial of PagerDuty AIOps features, please read PagerDuty AIOps Trials.

View the Operations Console

In the web app, navigate to AIOps Operations Console.

Configure the Operations Console

The console offers users great flexibility to customize the live incidents table. This includes the ability to add or remove standard incident, alert, and custom-defined columns, as well as filter, sort, and apply other configurations.

Column Selector

You can customize which fields are visible in the incidents table by adding, removing or reordering the fields. Click to open the column selector panel and select/deselect your desired columns. Reorder columns by dragging and dropping them to their preferred location.

You can also resize a column's width by clicking and dragging the edge to your desired size.

Users can also sort by up to three columns simultaneously.

You can also display Custom Fields on Incidents in the live incidents table by clicking Custom Columns at the bottom of the Column Selector and adding them to the table. You can add up to ten Custom Fields in the Operations Console's incident table. If you wish to display a new field but are unable to, please deselect an existing custom field first. You can sort on up to three columns in the incidents table.

📘

Tip

Since each users may have a different view based on their permissions and configurations, changes in one user’s account will not affect other users’ view. You can share your view with team members via the Share button.

You can also export the all loaded incidents with your customized columns as a CSV file using the menu.

Side Panel

You can view incident details by clicking on an incident's Title or alert count in the Alerts column. The side panel provides contextual information pertaining to the incident, including snoozed time (if applicable), alert grouping details (if applicable), alerts fields, alert custom details and so on, so you can view all things at a glance in one place.

You can also change the width by dragging the side panel horizontally to view more or fewer alert columns. PagerDuty will remember your settings for later visits.

Filters and Search

At the highest level, you can show All incidents, or click My teams to display just incidents belonging to your Teams. To show a specific group of incidents, you can filter your view by a list of standard filters such as Created time, Team, service, Incident Priority, escalation policy, number of impacted services, number of alerts, latest alert time, alert CEF fields, as well as custom defined filters such as Custom Fields on Incidents.

You can also quickly filter by incident status: Assigned to me, Open, Acknowledged or Triggered.

For more granular filters:

1. Click to open the the filter panel.
2. Click Add and select from the following:
   1. Alert Services
   2. Assignee
   3. Auto Resolved
   4. Duration
   5. Date
   6. Escalation Policy
   7. External Reference
   8. Incident Number
   9. Latest Note
   10. Main Service
   11. Priority
   12. Responder
   13. Status
   14. Teams
   15. Title
   16. Urgency
   17. User
   18. Custom Fields on Incidents
   19. Custom Details on Alerts (Available by request)
3. Depending on the field(s) you select, enter the appropriate criteria and click Apply Filters.

Additionally, users can perform keyword search to filter on incident Title, Incident number and Latest note.

📘

Tip

You can perform keyword search with conditions such as contains, starts with, equals, does not contain, and combine AND/OR operators to filter across a number of fields such as Incident Title, Incident Number, Last Notes. You can define up to five keywords with AND/OR operators.

For optimal performance, enter at least three characters for searches with the contains filter.

Actions

To take action on incidents within Operations Console, select the checkbox to the left of the incident(s) and click your desired action:

• Resolve
• Acknowledge
• Add Responder
• Reassign
• Run
• Merge
• Snooze
• Update Priority
• Add Note

Bulk Actions

When you want to perform actions on multiple incidents at once, you can click the selection box at the top of the incident table. This will select the first 50 incidents on the current page, and list the bulk action options at the bottom of your screen. Select from the following actions:

• Acknowledge
• Resolve
• Add Responder
• Reassign
• Merge
• Snooze
• Update Priority
• Add Note

Incident Feed Update Frequency

To optimize performance or during incident storms, you can toggle between Live and Paused update modes. By default, the console is set to Live updates, which continuously adds new incidents, and corresponding updates, to the feed.

You can optionally pause live updates by clicking the toggle. While Paused, new incidents will not be added to the Operations Console, but updates to existing incidents will still be displayed. Users can manually update the incident table by refreshing the page.

Custom Details

📘

Available By Request

This feature is available by request only. Please reach out to your account team to request this feature.

You can define and add specific custom details fields from your alert payload to the incidents table.

1. Click to open the column selector panel.
2. Scroll to the bottom of the list and click Add Custom Detail.
3. In the modal, enter a Table Header and the Custom Details Path (e.g., the name of the field as it appears in the alert payload, such as source or application).
   1. Optionally click + Add Column to add multiple custom detail columns at once.
4. Click Add Columns.

FAQ

How can I troubleshoot connection issues if the Operations Console does not load?

We use server-sent events (SSEs) to provide real-time updates. Your security or IT team may use a proxy/software to block these requests. If you encounter issues loading the Operations Console, please verify with your IT department whether SSEs are handled by proxies or third party software (e.g., antivirus programs or plugins). If so, you can request that they evaluate and enable our main SSE endpoint: /api/v1/opsconsole/incident_module/search.

You can analyze the HAR file for the affected session to check if the request to /api/v1/opsconsole/incident_module/search is present and successful. Missing, blocked, or canceled requests may indicate that something in your network is preventing the SSE connection.

Can I add event custom fields from the alert payload to the Operations Console?

How many event custom fields can I display in the Operations Console?