Incidents object schema includes the following attributes.
System-generated unique identifier for the incident.
Current incident status, which is determined by the most severe status of the correlated alerts. One of [
Whether the incident contains at least one active alert and has not been manually resolved. An incident is automatically resolved when all the alerts are resolved.
Whether at least one correlated alert has changed states frequently enough to be treated as flapping.
Whether the incident is currently resolved (
Snooze options for the incident.
Time when the earliest correlated alert was received, in Unix epochs.
Time of last change to incident that triggered applicable sharing updates, in Unix epochs.
Time of last change to incident, in Unix epochs.
Time when the incident was resolved, either manually or automatically when all alerts were resolved, in Unix epochs.
Array of the alerts that the incident contains.