Copy as Markdown[Open in ChatGPT](https://chatgpt.com/?q=Read%20https%3A%2F%2Fdocs-docusaurus.kinsta.page%2Fuser-guides%2Finvestigations%2Fcreate-an-investigation.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)[Open in Claude](https://claude.ai/new?q=Read%20https%3A%2F%2Fdocs-docusaurus.kinsta.page%2Fuser-guides%2Finvestigations%2Fcreate-an-investigation.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)

# Create an investigation

You can create an investigation in the following ways:

* From the Investigations Management screen

* From the Investigations popup modal

* By selecting an event to create an investigation

## Management screen[​](#management-screen "Direct link to Management screen")

To start a new investigation, click the detective hat icon in the top-right corner of your Coralogix toolbar and select **Manage investigations**. This redirects you to the Investigations Management screen, where you can click **+ Create investigation** to begin.

Enter the details in the [Investigations Overview](https://docs-docusaurus.kinsta.page/user-guides/investigations/conduct-an-investigation/.md#overview), choose the exposure mode (private/public), invite participants in the [Participants](https://docs-docusaurus.kinsta.page/user-guides/investigations/conduct-an-investigation/.md#participants) tab, and click **Create**. Your new investigation will then appear in the investigation management screen.

## Investigations modal[​](#investigations-modal "Direct link to Investigations modal")

To access all investigations you have created or been invited to, click the detective hat icon in the upper-right corner of the Coralogix toolbar and select **View investigations**. This opens a popup modal displaying details of the most recent investigation you accessed, without navigating away from your current platform location.

Create a new investigation directly from this modal by clicking the **+** icon.

## Select an event to create an investigation[​](#select-an-event-to-create-an-investigation "Direct link to Select an event to create an investigation")

Suspicious activity requiring investigation may arise from various events, such as an unusual log activity, an alert indicating an abnormal metric, or a dashboard widget showing an unexpected spike. These events can take multiple formats and originate from within or outside the Coralogix platform.

To create an investigation, select one or more [event objects](https://docs-docusaurus.kinsta.page/user-guides/investigations/conduct-an-investigation/.md#timeline-objects) within Coralogix, such as:

* A log in [Explore](https://docs-docusaurus.kinsta.page/user-guides/data_exploration/.md)

* An incident in the [Incidents](https://docs-docusaurus.kinsta.page/user-guides/alerting/incidents/.md) screen

* A widget in [Custom Dashboards](https://docs-docusaurus.kinsta.page/user-guides/custom-dashboards/introduction/.md)

* An alert in [Alert Explorer](https://docs-docusaurus.kinsta.page/user-guides/alerting/incidents/.md#alert-explorer)

Then, click **Add to investigation** > **New investigation**.

In the popup modal that appears, fill in the [Investigations Overview](https://docs-docusaurus.kinsta.page/user-guides/investigations/conduct-an-investigation/.md#overview) details and click **Create**. You can optionally add an explanation for the selected object(s) and send it. Each object will be added individually to the investigation timeline based on its timestamp.

You can also create an investigation from the Real User Monitoring (RUM) [Error Tracking](https://docs-docusaurus.kinsta.page/user-guides/rum/product-features/error-tracking/.md) screen by selecting one or more [error templates](https://docs-docusaurus.kinsta.page/user-guides/rum/product-features/error-template-view/.md).

Alternatively, select a single [error template](https://docs-docusaurus.kinsta.page/user-guides/rum/product-features/error-template-view/.md) and click the **Comments** button. Adding the first comment will automatically create an investigation. Learn more about [RUM comments](https://docs-docusaurus.kinsta.page/user-guides/investigations/open-a-rum-comment/.md).

## Additional resources[​](#additional-resources "Direct link to Additional resources")

![Creating an investigation](https://img.youtube.com/vi/GUzgYQZlPAE/mqdefault.jpg)

Creating an investigation

## Next steps[​](#next-steps "Direct link to Next steps")

Learn how to use the Overview, Activity, and Participants tabs in [Conduct an investigation](https://docs-docusaurus.kinsta.page/user-guides/investigations/conduct-an-investigation/.md).