Declare and respond to incidents in the Grafana mobile app

Declare incidents, follow what’s happening, and take on a response role, all from your phone.

Before you begin

Incidents appear in the app when Grafana IRM is turned on under Settings > Products, and your organization has incident response set up in Grafana IRM. If you don’t see Incidents under Browse, check your Products selection first, then check with your Grafana Cloud administrator. Refer to Choose which products you see.

Some controls also depend on your permissions in IRM, so your options might vary.

Find incidents

You can reach incidents from Home or from Browse.

Home has a My incidents section. The heading shows how many active incidents you’re involved in, and a tile below it shows the most recent one. Tap the heading to open the full list. When you have no active incidents, the section reads All looks great! You have no active incidents. and offers See all active, which lists every active incident in your stack.

For the full list, tap Browse > Incidents. It has three tabs:

Mine: incidents you declared, incidents where you hold a role, and incidents where you’re an observer.
Active: every ongoing incident in your stack.
All: every incident, ongoing or not.

Sort either list with the control in the app bar, which offers by age and by severity. Pull down to refresh, or scroll to the bottom to load more. The list also refreshes on its own while it’s open.

An empty list reads You don’t have relevant incidents. If the app can’t reach IRM, it shows Connection error. Tap Try again.

View incident details

Tap an incident to open it.

The top of the screen stays in place as you move between tabs. It shows the title, the description and labels if the incident has them, and the current status and severity. A Drill badge marks a practice incident, and a New badge marks one declared in the last hour.

Below that are three tabs:

Overview: response roles, participant counts under Paged participants and Chat participants, a Links section for related resources such as a meeting link or a post-incident report, and Declared by with who declared the incident and the time they did.
Timeline: a record of everything that’s happened, described in Follow the timeline.
Attachments: links to related resources. It reads Links to related resources will appear here until the incident has some.

If the incident has a linked chat channel, tap Open in Slack or Open in Teams at the bottom of the screen to join the conversation. To hand the incident off or pick it up on your computer, tap the share icon in the app bar.

Post a status update

If your organization has status updates turned on, Overview includes a Status updates section that records the key changes in the response. Tap Add status update to post one. Until someone does, the section reads There are no status updates yet.

Status updates on incidents you’re a participant in can also reach you as push notifications, but they’re off until you turn them on. Refer to Configure push notifications.

Follow the timeline

The Timeline tab is the running history of the incident, and its filters decide how much of that history you see.

Narrow the tab with the filter chips: Highly relevant, Relevant, All activity, and Archived. Relevant is selected by default. Sort with Newest first, which is also the default, or Oldest first.

When a filter leaves nothing to show, the tab reads No items match this filter and offers Show all activity. On a brand-new incident, it reads No timeline entries yet.

React to timeline updates

Reactions let you acknowledge what someone posted without adding another entry to the timeline. You pick from a fixed set of emoji.

On a message, tap + to choose a reaction. On any other timeline item, tap the item itself to open the picker, or tap + when the item already has reactions. To add or remove your own reaction, tap an existing one.

Edit an incident

Tap the incident’s title at the top of the detail screen to open Edit incident.

Change the name under What’s going on?, then adjust Labels, Severity, and Status as needed. Tap Save. You can’t save while the name is empty.

Assign and reassign incident roles

Response roles appear on the Overview tab. Which roles exist depends on your organization’s configuration in IRM. Key roles show even when nobody holds them, and the rest appear after someone’s assigned to them.

To fill an empty role, tap its row, then search for and select a teammate.
To hand a role to someone else, tap its row, tap Assign another user, then pick the new person.
To leave a role empty again, tap its row, then tap Unassign.
To add a role that isn’t listed yet, tap Add role, choose the role, then choose a teammate.

Declare an incident

Declare an incident from Home, from the Incidents list, or from an alert group you’re already working on. All three open the same form.

Only the name is required. Everything else either has a default or you can leave it blank:

What’s going on? names the incident. You can change it later.
Initial status describes what’s happening, in your own words.
Labels categorize the incident.
Severity defaults to the first severity your organization has configured.
Status defaults to the first status your organization has configured.
Slack Channel prefix sets the prefix for the incident’s chat channel.

Tap Create to declare the incident. The app opens it so you can start the response.

Declare from Home

Tap + in the app bar.
Tap Declare incident.
Complete the form, then tap Create.

Declare from the Incidents list

Tap Browse > Incidents.
Tap + in the app bar. This opens the form directly, without a menu.
Complete the form, then tap Create.

Declare from an alert group

On an alert group you’ve acknowledged, tap Declare incident on the tile. You can also tap More, on either the tile or the detail screen, and tap Declare incident there.

The form arrives with the alert group’s title and labels already filled in, so you don’t have to retype them. The incident you create links back to the alert group.

Get help from Assistant

Tap the Assistant icon in the bottom-right corner of the incident screen to open Grafana Assistant and ask questions in your own words. The incident comes with you as context, including its title, status, and severity, so you can ask about it without repeating the details.

The icon appears only when Assistant is available for your organization and turned on under Settings > Products. Refer to Choose which products you see.

Refer to Assistant on mobile to learn what Assistant can and can’t do on mobile.