> ## Documentation Index
> Fetch the complete documentation index at: https://docs.rootly.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Workflows

> Use Datadog workflow actions in Rootly to create notebooks, retrieve graph snapshots, fetch dashboards, and pull metric data automatically during incidents.

## Overview

Rootly workflows can interact with Datadog during an incident. You can create Datadog notebooks to capture investigation notes, pull graph snapshots to attach signal data to the incident record, and fetch dashboards for situational awareness — all triggered automatically or on demand.

<Callout icon="circle-info" color="#DBEAFE">
  These workflow actions require the Datadog integration to be connected. See [Installation](/integrations/datadog/installation) if you have not yet set it up.
</Callout>

## Available Datadog Workflow Actions

| Action                         | Description                                                                                  |
| ------------------------------ | -------------------------------------------------------------------------------------------- |
| **Create Datadog Notebook**    | Creates a new notebook in your Datadog account, optionally pre-populated with incident data  |
| **Get Datadog Graph Snapshot** | Retrieves a point-in-time snapshot of a Datadog metric graph and attaches it to the incident |
| **Get Datadog Dashboard**      | Fetches a Datadog dashboard URL and surfaces it in the incident timeline                     |

## Create Datadog Notebook

Use this action to automatically create a Datadog notebook when an incident starts or reaches a specific status. Notebooks are useful for capturing investigation notes, timelines, and graphs in a single Datadog-native view.

<Steps>
  <Step title="Open workflow creation">
    Navigate to **Workflows** in Rootly and click **Create Workflow**, or open an existing workflow to edit it.
  </Step>

  <Step title="Add the action">
    Click **Add Action**, search for **Datadog**, and select **Create Datadog Notebook**.
  </Step>

  <Step title="Configure the action">
    | Field             | Required | Description                                                                                                                                                     |
    | ----------------- | -------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------- |
    | **Name**          | No       | A label for this action step. Does not affect behavior.                                                                                                         |
    | **Notebook Name** | Yes      | The title of the notebook. Supports Liquid syntax — use the [Liquid Variable Explorer](https://rootly.com/account/help/liquid-explorer) to build dynamic names. |
  </Step>

  <Step title="Save the workflow">
    Click **Add**, name the workflow, and click **Create Workflow**.
  </Step>
</Steps>

## Get Datadog Graph Snapshot

Use this action to capture a point-in-time graph from Datadog and attach it to the incident. This is useful for preserving the state of a metric at the time an incident was declared or escalated.

<Steps>
  <Step title="Add the action">
    In your workflow, click **Add Action**, search for **Datadog**, and select **Get Datadog Graph Snapshot**.
  </Step>

  <Step title="Configure the action">
    | Field            | Required | Description                                                                                             |
    | ---------------- | -------- | ------------------------------------------------------------------------------------------------------- |
    | **Metric Query** | Yes      | The Datadog metric query to snapshot — for example `avg:system.cpu.user` with an optional scope filter. |
    | **Start**        | No       | Snapshot start time in Unix epoch seconds. Supports Liquid syntax.                                      |
    | **End**          | No       | Snapshot end time in Unix epoch seconds. Defaults to the current time if blank.                         |
  </Step>
</Steps>

## Get Datadog Dashboard

Use this action to retrieve a Datadog dashboard and surface its URL in the incident timeline. This gives responders quick access to the relevant monitoring view without leaving Rootly.

<Steps>
  <Step title="Add the action">
    In your workflow, click **Add Action**, search for **Datadog**, and select **Get Datadog Dashboard**.
  </Step>

  <Step title="Configure the action">
    | Field            | Required | Description                                                                                 |
    | ---------------- | -------- | ------------------------------------------------------------------------------------------- |
    | **Dashboard ID** | Yes      | The ID of the Datadog dashboard to fetch. Found in the dashboard URL (e.g., `abc-123-xyz`). |
  </Step>
</Steps>

## Alert Workflows

In addition to incident workflow actions, you can build **Alert workflows** in Rootly that trigger automatically when a Datadog alert arrives. These are separate from incident workflows and configured under **Workflows → Alert**.

Common patterns:

* **Auto-create an incident** when a SEV-1 Datadog alert fires
* **Page on-call** for alerts with `alert_priority` of `P1` or `P2`
* **Send a Slack message** to a channel when a monitor transitions to `ALERT`
* **Resolve the alert** automatically when Datadog sends a `RECOVERY` transition

To scope workflows to Datadog only, add a condition where **Source is Datadog**, or filter on payload fields like `alert_priority`, `alert_title`, or `alert_transition`. See the [Alerts](/integrations/datadog/alerts) page for a full walkthrough.

## Frequently Asked Questions

<AccordionGroup>
  <Accordion title="The Create Notebook action ran but no notebook appeared in Datadog" icon="circle-exclamation">
    Check the workflow run log in Rootly for error details. Confirm the Datadog Application Key has sufficient permissions and that the integration is still connected under **Configuration → Integrations**.
  </Accordion>

  <Accordion title="Can I chain Datadog actions with other workflow steps?" icon="link">
    Yes. Datadog actions can be combined with any other Rootly workflow actions in the same workflow — for example, create a Datadog notebook and then send a Slack message with the notebook link.
  </Accordion>

  <Accordion title="What Liquid variables can I use in notebook names or metric queries?" icon="code">
    Any incident Liquid variable is supported. Use the [Liquid Variable Explorer](https://rootly.com/account/help/liquid-explorer) to browse available variables and preview their values.
  </Accordion>
</AccordionGroup>