Incidents API Object

{
  "alerts": [  ],
  "assignee": "[email protected]",
  "classes": [  ],
  "closed_on": 1618394684,
  "correlation_definition": "9779e1ab-ceb7-44f5-8549-a2128c8f0e69",
  "created_at": 1618391145,
  "description": "  ",
  "external_names": [  ],
  "first_event_time": 1618391143,
  "in_progress_on": null,
  "incident_id": 90730,
  "last_event_time": 1618391143,
  "last_state_change": 1618394684,
  "policies": [  ],
  "resolved_on": null,
  "services": [  ],
  "severity": "clear",
  "severity_numeric":   ,
  "status": "closed",
  "status_numeric":   ,
  "superseded_by": null,
  "tags": {
      "jira-ticket": ["RGB-2654"],
      "error-code" : ["x0F391"],
      "default-sprint": ["dazzling-wright"],
      "scrum-team": ["spifftacular-brainiacs"]
    },
  "total_alerts": 1,
  "types": [ ]
}

alerts

list

A list of the alerts in the incident.

assignee

string

Email of the Moogsoft Cloud user who is assigned to the incident.

classes

list

A list of the general performance issues that triggered the member alerts in this incident. Examples include application, network, middleware, and cloud. This list is derived from the class field in all member alerts.

closed_on

UTC timestamp

Time when the incident was closed, or NULL if it is still open.

correlation_definition

string

The ID of the correlation definition responsible for creating the incident.

created_at

UTC timestamp

Timestamp when the Correlation Engine created this incident.

description

string

Auto-generated description of the incident, based on the description field in the correlation definition that generated the incident.

external_names

string

The name of the triggering outbound webhook, if the incident was triggered by an external system.

first_event_time

UTC timestamp

Timestamp of the earliest event in this incident.

in_progress_on

UTC timestamp

Time when the incident status was set to "In Progress."

incident_id

integer

Moogsoft auto-generates this ID when it creates the incident.

last_event_time

UTC timestamp

Timestamp of the most recent event in this incident.

last_status_change

UTC timestamp

The last time a user updated the incident status or severity.

policies

list

Reserved for future use.

Resolved On

UTC timestamp

Time when the incident was resolved.

services

UTC timestamp

A list of all services that generated the events included in this incident. This list is derived from the service field in all member alerts.

severity

string

The incident severity equals the highest severity of any alert in that incident.

severity_numeric

integer

A numeric representation of alert severity. 0 = clear, 1 = unknown, 2 = warning, 3 = minor, 4 = major, 5 = critical.

status

string

Incident status: "open", "in progress", "resolved", or "closed".

status_numeric

integer

A numeric representation of the alert status: 0 = unknown, 1 = open, 2 = in progress, 7 = superseded, 8 = resolved, 9 = closed.

superseded_by

string

An incident that was created after this one which includes all of the alerts in this incident. This occurs when a more encompassing incident is created which includes the alerts of other incidents.

tags

JSON object

A collection of all tags from all member alerts.

total_alerts

integer

The total number of alerts in the incident.

types

list

The list of types from alerts in this incident.