This page describes how to navigate between the IRM console and the Stackdriver Monitoring console and lists the differences in terminology and behaviors in the two consoles.
This section describes the key differences in terminology, to help you better understand the navigation points and differences in behaviors between the two consoles.
Incidents and Alerts
The term Incidents has slightly different meaning in Monitoring and IRM.
Incidents in the Monitoring console are equivalent to alerts in IRM. Clicking an incident link in the Stackdriver Monitoring console takes you to the Alert Details view in IRM.
In IRM, incidents are the vehicle for all response and management activities. An alert might or might not already be associated with an IRM incident.
Resolved and recovered
The term Resolved in the Stackdriver Monitoring console is equivalent to the term Recovered in IRM. Recovered is an IRM alert status that indicates that a previously firing alert is back within its normal parameters. In IRM, when an alert is out of its normal parameters, its status is Firing.
In IRM, the term Resolved is a stage in the incident's lifecycle of the incident and the response team's response activities. This incident stage indicates that the incident no longer requires an active response.
For descriptions of incident stages and alert statuses, go to IRM Concepts.
You can recognize the Stackdriver Monitoring console by its top navigation bar and its left-hand navigation menu:
The IRM console features the title Incident Response and Management:
Navigate to the Stackdriver Monitoring console
From anywhere within the IRM console, click the Stackdriver logo in the top navigation bar:
To return to the IRM dashboard, click Incident Response in the left-side menu.
Navigate to the IRM console dashboard
There are two ways to navigate to the IRM console dashboard:
From the Stackdriver Monitoring console, click Incident Response in the left-side menu:
From anywhere within IRM, click Incident Response and Management in the top bar:
Navigate to the IRM console from an alerting notification
Depending on how your alerting policies are configured, you receive and acknowledge an alert notification through your notification channel (for instance, email, Slack, or PagerDuty).
Click the View Details link in the alert notification. This takes you to the Alert Details view in the IRM tool.
Frequent actions between consoles
There are several actions in IRM Alert Details view that take you to the Stackdriver console. Following is a screenshot of an Alert details pane, which features several navigation points discussed in the sections below:
Review underlying alerting policies
Stackdriver Monitoring alerting policies are the basis for the alerts featured in IRM.
To review the underlying policy: from the Alert details pane within IRM, click the Policy URL. The alerting policy opens in the Stackdriver Monitoring console:
For more information on alerting policies, go to Introduction to alerting.
View alerting resource
To see the resource underlying the alert: from the Alert Details pane within IRM, click the Project URLs. The dashboard opens in the Stackdriver Monitoring console.
Show alerting metric
To examine the metric causing the alert to fire:
From the Alert Details view within IRM, click Metrics Explorer.
Metrics Explorer opens in the Stackdriver Monitoring console. A preconfigured visualization of the metric displays.
Go to the Find resource type and metric field. You can further specify what data should display and how the chart should display it.
For information, go to Selecting metrics.
Acknowledging an alert in IRM
In IRM, when an alert becomes associated with an incident through the Take action options, the alert is acknowledged.
The acknowledged state is reflected in the Stackdriver Monitoring console:
For more information on examining alerts in the IRM console, go to Investigating an alert.
Acknowledging an alert in PagerDuty
For PagerDuty users, PagerDuty displays an alert's "acknowledged" state. Acknowledging an alert in PagerDuty before associating the alert with an incident in IRM currently has no impact in IRM.
Closing an alert notification in IRM
In Stackdriver Monitoring Alerting, an alert sometimes mistakenly fires and cannot recover on its own; for example, an alert on an instance that's now deleted. In the Stackdriver Monitoring console, you can address this issue by manually selecting Silence for 5 minutes.
In IRM, setting an incident stage to Resolved closes the associated alerts. Marking an incident Resolved indicates that an active incident response is no longer required. When an alert can't recover on its own and there's no root-cause event to address, setting the incident stage to Resolved concludes the incident response.