Split Incident

Splits a list of alerts into a new BigPanda incident



All BigPanda APIs require Bearer Token Authorization in the call headers.

This API uses the User API Key type of Authorization token.


  • Split actions are heavy asynchronous operations and will have a small delay before being reflected in your data.
    • BigPanda will automatically prevent duplicate split requests. Multiple consecutive attempts to split the same alerts from an incident will result in an error.


202: Success

Possible error codes include:

  • 401 Unauthorized - Authentication violation - token is invalid or missing
  • 403 Forbidden— Insufficient permissions
  • 404 Not Found— Entity with this ID cannot be found
  • 429 Too Many Requests— Rate limitation reached
  • 500 Internal Server Error— Unexpected error