How to build PagerDuty dashboards in Metabase
PagerDuty is an incident management platform for on-call scheduling, alerting, escalation, and incident response. Metabase is where you turn those operational signals into shared, trustworthy dashboards. This guide covers two complementary paths: a lightweight MCP + CLI route that pulls live data with the PagerDuty MCP Server and loads a CSV into Metabase with the Metabase CLI, and a durable pipeline route that syncs PagerDuty rollups into a database so you can build dashboards anyone can read.
How do you connect PagerDuty to Metabase?
Most teams combine both routes: use MCP and CLI uploads for a fast first pass, then move recurring reliability reporting to a warehouse-backed model.
Live data in, quick analysis out
Pair the PagerDuty MCP Server with the Metabase CLI. Use MCP for live lookups, write a scoped result to CSV, then load it into Metabase as a ready-to-query table and model.
- Quick lookups such as "show me incident health with mtta and mttr"
- Loading a PagerDuty export into Metabase in seconds
- Spot-checks and one-off analyses without a warehouse
- Great for exploration, not governed reliability reporting
- Use read-only/scoped credentials wherever the MCP server supports them
- CSV uploads are snapshots — refresh or move to the pipeline for history
Durable dashboards with history
Sync PagerDuty rollups and metadata into a database or warehouse with a connector, custom pipeline, or API, then point Metabase at it.
- PagerDuty reliability dashboards leaders depend on
- Joining PagerDuty data with deploys, issues, support, or cost data
- Long-run trends for incident health with mtta and mttr and alert noise and auto-resolution
- You own the refresh schedule and the rollup grain
- Sync aggregates and entities — not the raw event firehose
- Metric definitions must be consistent across services and teams
What can you analyze from PagerDuty data in Metabase?
- Incident health with MTTA and MTTR — built from incidents and the related incident log entries, services, escalation policies data your sync exposes.
- Alert noise and auto-resolution — built from incidents and the related incident log entries, services, escalation policies data your sync exposes.
- On-call load by schedule and shift — built from incidents and the related incident log entries, services, escalation policies data your sync exposes.
- Service reliability ranking — built from incidents and the related incident log entries, services, escalation policies data your sync exposes.
- Escalation path effectiveness — built from incidents and the related incident log entries, services, escalation policies data your sync exposes.
Which PagerDuty dashboards should you build in Metabase?
Incident health
Volume, acknowledgment, and recovery at a glance.
- Incidents per week by severity (stacked bar)
- Median time to acknowledge (line)
- Median time to resolve (line)
- Open incidents right now (number)
Alert quality
Whether alerts are signal or noise.
- Alerts fired per week (line)
- Alert-to-incident conversion rate (number + trend)
- Noisiest services or monitors (table)
- Auto-resolved alerts share (number)
On-call load
Whether the pager is sustainable for the humans.
- Pages per on-call shift (bar)
- Off-hours pages per week (line)
- Escalations per week (bar)
- Pages by service (table)
Service reliability
Which services drive incident load over time.
- Incidents by service, trailing 90 days (bar)
- Repeat incidents on the same service (table)
- MTTR by service (bar)
- Postmortem completion rate (number)
How do you use the PagerDuty MCP Server with the Metabase CLI?
Pair the PagerDuty MCP Server with the Metabase CLI for fast, hands-on analysis. MCP is useful for scoped lookups and summarized exports; the Metabase CLI's upload command loads CSV data into Metabase and creates a ready-to-query table and model.
Example workflow
- Ask the MCP server for recent incidents with acknowledge and resolve timestamps.
- Export the result as CSV, keeping stable IDs, services, environments, severities, and timestamps.
- Run
mb upload csvto load it into Metabase as a table and model, then build questions and dashboards on top.
Be honest about the limits
- MCP lookups are excellent for exploration, not scheduled reporting.
- A CSV upload is a snapshot; refresh it with
mb upload replaceor move to the pipeline for real history. - Acknowledge and resolve timestamps are required for true MTTA and MTTR.
mb upload csvneeds an uploads database configured under Admin → Settings → Uploads.
How do you set up PagerDuty MCP and the Metabase CLI?
PagerDuty MCP Serverofficial
- Transport
- Hosted remote MCP via Streamable HTTP
- Auth
- OAuth or a PagerDuty user API token
- Best for
- Live scoped lookup and export
Metabase CLIofficial
- Install
npm install -g @metabase/cli- Auth
mb auth login- Load data
mb upload csv --file data.csv- Requires
- An uploads database (Admin → Settings → Uploads)
{
"mcpServers": {
"pagerduty": {
"url": "https://mcp.pagerduty.com/mcp"
}
}
}EU accounts use https://mcp.eu.pagerduty.com/mcp. A self-hosted variant (uvx pagerduty-mcp) is read-only by default — write tools need an explicit flag.
# Install the Metabase CLI
npm install -g @metabase/cli
# Log in (opens your browser; requires Metabase v62+)
mb auth login --url https://your-metabase.example.com
# Load a incidents export — creates a table AND a model
mb upload csv --file pagerduty-incidents.csv --collection root
# Refresh that same table later from a new export
mb upload replace <table-id> --file pagerduty-incidents.csvCan you generate a PagerDuty dashboard with AI?
Yes. Use the prompt below with any assistant that can run the PagerDuty MCP Server and the Metabase CLI. It works end to end: if PagerDuty tables already exist in Metabase it analyzes those; otherwise it pulls scoped, summarized data over MCP, loads it with mb upload csv, then builds the dashboard and caveats any metric that needs missing history.
Create a polished Metabase dashboard for PagerDuty incident management analytics.
Work end to end: get the data into Metabase if it isn't there yet, then build.
Goal: Help engineering and operations leaders understand incident volume, MTTA, MTTR, alert noise, on-call load, and service reliability from PagerDuty data.
Step 1 — Find or load the data:
- First, check what already exists in Metabase (search for pagerduty tables and
models). If durable PagerDuty data is already present — synced from a warehouse
or uploaded earlier — use it and skip to Step 2.
- If nothing is there, pull a scoped, summarized export with the PagerDuty MCP Server:
incidents, plus incident log entries, services, escalation policies.
Prefer aggregated or rollup views over raw events. Write each result to a CSV,
then load it with the Metabase CLI — run "mb upload csv --file <export>.csv" so
each upload creates a table and a ready-to-query model. Use "mb upload replace
<table-id> --file <export>.csv" to refresh an existing table instead of creating
duplicates.
Step 2 — Inspect before querying:
Do not assume exact table or column names. Inspect available fields, services,
environments, timestamps, and whether rollups or history exist before creating
duration or trend cards.
Important:
- Build on whatever data is present; don't claim Metabase connects natively to
PagerDuty — it reads a database or CLI-uploaded tables.
- Never try to load the raw event firehose into Metabase; use rollups, entity
tables, and incident- or group-grain data.
- Only compute durations (MTTA, MTTR, time-to-resolve) when the required
timestamps exist.
- Exclude test, staging, or muted objects from headline reliability cards, and
segment by environment where the field exists.
- A single CSV is a point-in-time snapshot: only build trend cards if there is a
usable date column or multiple periods have been uploaded.
Dashboard title: PagerDuty Incident Management Overview
Sections:
1. Executive summary: Open incidents; Incidents last 30 days; Median MTTA;
Median MTTR; High-urgency share.
2. Volume: Incidents by week and severity; incidents by service and team.
3. Response: MTTA and MTTR trends; incidents breaching response targets.
4. Alert quality: Alerts by week; alert-to-incident conversion; noisiest services.
5. On-call load: Pages per shift; off-hours pages; escalation rate.
Filters: Date range, Service, Environment, Severity, Team, Status.
Output: Build the dashboard if you have permission; otherwise provide the exact
questions, SQL, model definitions, and layout. Include caveats for any metric
that cannot be calculated from the available data.How do you sync PagerDuty data into a database or warehouse?
For dashboards that need history and reliability, land PagerDuty rollups and metadata in a database first, then connect Metabase to that database.
Connector options
- Managed ETL — use a connector when one covers the objects you need.
- Custom pipeline — use the PagerDuty REST API v2 for control over rollup grain, fields, and refresh cadence.
- MCP + CSV — use this for quick exploration and one-off slices.
Sync incidents, log entries, services, escalation policies, schedules, and teams with the Airbyte PagerDuty source, Fivetran's PagerDuty connector, or REST API scripts.
Notes
- Decide the rollup grain first (hourly or daily per service/environment) — it drives warehouse cost and every trend card.
- Land raw entity tables first, then build clean Metabase models on top.
- Normalize service, team, severity, created, acknowledged, and resolved-timestamp fields.
How should you model PagerDuty data in Metabase?
Core tables
| Table | Grain | Key columns |
|---|---|---|
pagerduty_incidents | one row per incident | id, service_id, severity, urgency, status, created_at, acknowledged_at, resolved_at |
pagerduty_log_entries | one row per incident lifecycle event | id, incident_id, type, agent_id, channel, created_at |
pagerduty_services | one row per service | id, name, team_id, escalation_policy_id, status |
Modeling advice
- Build a clean
incidentsmodel with common columns across tools, so multi-source dashboards don't fork definitions. - Separate entity tables (services, monitors, policies) from time-series rollups and event-grain tables.
- Exclude test, staging, and muted objects from headline reliability metrics; keep environment as an explicit column.
- Use stable IDs for service, team, and incident joins; display names change.
Which PagerDuty metrics should you track in Metabase?
| Metric | Definition | Notes |
|---|---|---|
| Incident count | Qualifying incidents per period, segmented by severity. | Watch the trend by service, not one number. |
| Mean time to acknowledge | Created to first acknowledge, as a median. | A paging-health metric — separate from MTTR. |
| MTTR | Median time from incident start to resolution. | Segment by severity; exclude open incidents. |
| Alert noise rate | Alerts that never became incidents divided by all alerts. | High noise trains responders to ignore pages. |
| SLO compliance | Periods meeting the SLO target divided by all periods. | Report against explicit, published targets. |
What SQL powers PagerDuty dashboards in Metabase?
These assume a cleaned analytical model in a warehouse (PostgreSQL dialect). Adjust table and column names to match your pipeline.
The core incident-health trend.
SELECT
date_trunc('month', created_at) AS month,
COUNT(*) AS incidents,
percentile_cont(0.5) WITHIN GROUP (
ORDER BY EXTRACT(EPOCH FROM (acknowledged_at - created_at)) / 60
) AS median_ack_minutes,
percentile_cont(0.5) WITHIN GROUP (
ORDER BY EXTRACT(EPOCH FROM (resolved_at - created_at)) / 60
) AS median_resolve_minutes
FROM incidents
WHERE resolved_at IS NOT NULL
GROUP BY 1
ORDER BY 1;Alerts that never became incidents.
SELECT
service_name,
COUNT(*) AS alerts,
COUNT(*) FILTER (WHERE became_incident) AS incidents,
ROUND(
100.0 * COUNT(*) FILTER (WHERE NOT became_incident)
/ NULLIF(COUNT(*), 0), 1
) AS noise_rate
FROM alerts
WHERE fired_at >= CURRENT_DATE - INTERVAL '90 days'
GROUP BY service_name
ORDER BY noise_rate DESC;Where incident load concentrates, trailing 90 days.
SELECT
service_name,
severity,
COUNT(*) AS incidents,
percentile_cont(0.5) WITHIN GROUP (
ORDER BY EXTRACT(EPOCH FROM (resolved_at - created_at)) / 3600
) AS median_resolve_hours
FROM incidents
WHERE created_at >= CURRENT_DATE - INTERVAL '90 days'
AND resolved_at IS NOT NULL
GROUP BY service_name, severity
ORDER BY incidents DESC;