---
title: Run your first investigation
order: 1
description: From sign-in to answer in five minutes.
---

# Run your first investigation

This guide walks through the shortest path from a fresh account to your
first agent answer.

## Step 0 — Sign in

Open [investibook.tidbcloud.com](https://investibook.tidbcloud.com) and sign
in. Use **Continue with Google** if your team has SSO enabled, otherwise the
email and password your administrator gave you.

![Investibook sign-in screen](/docs/_assets/login.png)

After signing in, you land on the **Workspaces** page.

## Step 1 — Create a workspace

Click **Create new workspace** on the top right.

![Create new workspace button highlighted](/docs/_assets/create-workspace-button.png)

A new workspace named **Untitled Workspace** opens automatically.

![Newly created Untitled Workspace card](/docs/_assets/untitled-workspace-card.png)

## Step 2 — Add case information

Bind the case to the workspace by clicking **Add sources**.

![Workspace sources panel with the Add sources button highlighted](/docs/_assets/workspace-add-sources.png)

Currently you add an **Alert ID, TCOC ID, or TCID Case ID** manually. Pick
the type, paste the ID, and confirm.

![Add Source modal with an Alert ID](/docs/_assets/add-source-modal.png)

The agent reads the case and posts a welcome message summarizing the basic
metadata — component, alert type, cluster, region, status.

![Welcome message summarizing alert and cluster metadata](/docs/_assets/welcome-message.png)

## Step 3 — Skim the evidence

For many cases, Investibook will already have collected **workspace evidence**
into the Studio panel on the right — metrics, slow queries, log stats, and
any pre-authored reports that cite them. See [Features → Evidence](/docs/features/evidence)
for the full anatomy.

![Evidence cards in the Studio panel](/docs/_assets/pregenerated-reports.png)

> At this stage some of the evidence the agent has highlighted may not be
> right. The system learns from your investigation as you go.

## Step 4 — Investigate further via chat

If a pattern is missing or wrong, keep going in chat. The agent
automatically picks the right **MCP tools, resources, or skills** for the
data it needs.

You can also explicitly ask the agent to grab a Grafana screenshot or run
PromQL:

![Agent capturing a Grafana screenshot via the clinic skill](/docs/_assets/chat-screenshot-result.png)

![Agent running PromQL to compute CPU and QPS changes](/docs/_assets/chat-promql-result.png)

## Next steps

- Share the workspace — see [Features → Sharing](/docs/features/sharing).
- Pick the right skills for your investigation — see
  [Features → Skill Hub](/docs/features/skill-hub).
- Work outside the web app — see
  [How-to → Use Investibook from the CLI](/docs/how-to/use-cli),
  [How-to → Use Investibook from Feishu](/docs/how-to/use-feishu),
  and [How-to → Use Investibook on mobile](/docs/how-to/use-mobile).