---
title: "Get the details of an incident"
method: GET
path: "/api/v2/incidents/{incident_id}"
tags: ["Incidents"]
---

# Get the details of an incident

`GET /api/v2/incidents/{incident_id}`

## Request

- Base URL: `https://api.datadoghq.com`
- URL: `https://api.datadoghq.com/api/v2/incidents/{incident_id}`
- Auth: one of:
  - API key in header `DD-API-KEY` and API key in header `DD-APPLICATION-KEY`
  - OAuth 2
    - Authorization code: `/oauth2/v1/authorize`
    - Token URL: `/oauth2/v1/token` scopes: `incident_read`

Get the details of an incident by `incident_id`.

## Path parameters

- `incident_id` string, required

## Query parameters

- `include` IncidentRelatedObject[]

## Response `200`

OK

- IncidentResponse: Response with an incident.
  - `data` IncidentResponseData, required: Incident data from a response.
    - `attributes` IncidentResponseAttributes: The incident's attributes from a response.
      - `archived` string, date-time, nullable: Timestamp of when the incident was archived.
      - `case_id` integer, nullable: The incident case id.
      - `created` string, date-time: Timestamp when the incident was created.
      - `customer_impact_duration` integer: Length of the incident's customer impact in seconds. Equals the difference between `customer_impact_start` and `customer_impact_end`.
      - `customer_impact_end` string, date-time, nullable: Timestamp when customers were no longer impacted by the incident.
      - `customer_impact_scope` string, nullable: A summary of the impact customers experienced during the incident.
      - `customer_impact_start` string, date-time, nullable: Timestamp when customers began being impacted by the incident.
      - `customer_impacted` boolean: A flag indicating whether the incident caused customer impact.
      - `declared` string, date-time: Timestamp when the incident was declared.
      - `declared_by` IncidentNonDatadogCreator, nullable: Incident's non Datadog creator.
        - `image_48_px` string: Non Datadog creator `48px` image.
        - `name` string: Non Datadog creator name.
      - `declared_by_uuid` string, nullable: UUID of the user who declared the incident.
      - `detected` string, date-time, nullable: Timestamp when the incident was detected.
      - `fields` object: A condensed view of the user-defined fields attached to incidents.
      - `incident_type_uuid` string: A unique identifier that represents an incident type.
      - `is_test` boolean: A flag indicating whether the incident is a test incident.
      - `modified` string, date-time: Timestamp when the incident was last modified.
      - `non_datadog_creator` IncidentNonDatadogCreator, nullable: Incident's non Datadog creator.
        - `image_48_px` string: Non Datadog creator `48px` image.
        - `name` string: Non Datadog creator name.
      - `notification_handles` IncidentNotificationHandle[], nullable: Notification handles that will be notified of the incident during update.
        - `display_name` string: The name of the notified handle.
        - `handle` string: The handle used for the notification. This includes an email address, Slack channel, or workflow.
      - `public_id` integer: The monotonically increasing integer ID for the incident.
      - `resolved` string, date-time, nullable: Timestamp when the incident's state was last changed from active or stable to resolved or completed.
      - `severity` 'UNKNOWN' | 'SEV-0' | 'SEV-1' | 'SEV-2' | 'SEV-3' | 'SEV-4' | 'SEV-5': The incident severity.
      - `state` string, nullable: The state incident.
      - `time_to_detect` integer: The amount of time in seconds to detect the incident. Equals the difference between `customer_impact_start` and `detected`.
      - `time_to_internal_response` integer: The amount of time in seconds to call incident after detection. Equals the difference of `detected` and `created`.
      - `time_to_repair` integer: The amount of time in seconds to resolve customer impact after detecting the issue. Equals the difference between `customer_impact_end` and `detected`.
      - `time_to_resolve` integer: The amount of time in seconds to resolve the incident after it was created. Equals the difference between `created` and `resolved`.
      - `title` string, required: The title of the incident, which summarizes what happened.
      - `visibility` string, nullable: The incident visibility status.
    - `id` string, required: The incident's ID.
    - `relationships` IncidentResponseRelationships: The incident's relationships from a response.
      - `attachments` RelationshipToIncidentAttachment: A relationship reference for attachments.
        - `data` RelationshipToIncidentAttachmentData[], required: An array of incident attachments.
          - `id` string, required: A unique identifier that represents the attachment.
          - `type` 'incident_attachments', required: The incident attachment resource type.
      - `commander_user` NullableRelationshipToUser, nullable: Relationship to user.
        - `data` NullableRelationshipToUserData, nullable, required: Relationship to user object.
          - `id` string, required: A unique identifier that represents the user.
          - `type` 'users', required: Users resource type.
      - `created_by_user` RelationshipToUser: Relationship to user.
        - `data` RelationshipToUserData, required: Relationship to user object.
          - `id` string, required: A unique identifier that represents the user.
          - `type` 'users', required: Users resource type.
      - `declared_by_user` RelationshipToUser: Relationship to user.
        - `data` RelationshipToUserData, required: Relationship to user object.
          - `id` string, required: A unique identifier that represents the user.
          - `type` 'users', required: Users resource type.
      - `impacts` RelationshipToIncidentImpacts: Relationship to impacts.
        - `data` RelationshipToIncidentImpactData[], required: An array of incident impacts.
          - `id` string, required: A unique identifier that represents the impact.
          - `type` 'incident_impacts', required: The incident impacts type.
      - `integrations` RelationshipToIncidentIntegrationMetadatas: A relationship reference for multiple integration metadata objects.
        - `data` RelationshipToIncidentIntegrationMetadataData[], required: Integration metadata relationship array
          - `id` string, required: A unique identifier that represents the integration metadata.
          - `type` 'incident_integrations', required: Integration metadata resource type.
      - `last_modified_by_user` RelationshipToUser: Relationship to user.
        - `data` RelationshipToUserData, required: Relationship to user object.
          - `id` string, required: A unique identifier that represents the user.
          - `type` 'users', required: Users resource type.
      - `responders` RelationshipToIncidentResponders: Relationship to incident responders.
        - `data` RelationshipToIncidentResponderData[], required: An array of incident responders.
          - `id` string, required: A unique identifier that represents the responder.
          - `type` 'incident_responders', required: The incident responders type.
      - `user_defined_fields` RelationshipToIncidentUserDefinedFields: Relationship to incident user defined fields.
        - `data` RelationshipToIncidentUserDefinedFieldData[], required: An array of user defined fields.
          - `id` string, required: A unique identifier that represents the responder.
          - `type` 'user_defined_field', required: The incident user defined fields type.
    - `type` 'incidents', required: Incident resource type.
  - `included` IncidentResponseIncludedItem[]: Included related resources that the user requested.
    - union: An object related to an incident that is included in the response.
      - IncidentUserData: User object returned by the API.
        - `attributes` IncidentUserAttributes: Attributes of user object returned by the API.
          - `email` string: Email of the user.
          - `handle` string: Handle of the user.
          - `icon` string: URL of the user's icon.
          - `name` string, nullable: Name of the user.
          - `uuid` string: UUID of the user.
        - `id` string: ID of the user.
        - `type` 'users': Users resource type.
      - AttachmentData: Attachment data from a response.
        - `attributes` AttachmentDataAttributes, required: The attachment's attributes.
          - `attachment` AttachmentDataAttributesAttachment: The attachment object.
            - `documentUrl` string: The URL of the attachment.
            - `title` string: The title of the attachment.
          - `attachment_type` 'postmortem' | 'link': The type of the attachment.
          - `modified` string, date-time: Timestamp when the attachment was last modified.
        - `id` string, required: The unique identifier of the attachment.
        - `relationships` AttachmentDataRelationships, required: The attachment's resource relationships.
          - `incident` RelationshipToIncident: Relationship to incident.
            - `data` RelationshipToIncidentData, required: Relationship to incident object.
              - …
          - `last_modified_by_user` RelationshipToUser: Relationship to user.
            - `data` RelationshipToUserData, required: Relationship to user object.
              - …
        - `type` 'incident_attachments', required: The incident attachment resource type.

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `429`: Too many requests

---

[API](https://skmtc.dev/datadog/apis/datadog-api-v2-collection.md) - [All operations](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/llms.txt) - [OpenAPI document](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/revisions/da68bf029e4c?raw)
