---
title: "Get a list of incidents"
method: GET
path: "/log/incident"
tags: ["Log"]
---

# Get a list of incidents

`GET /log/incident`

## Request

- Base URL: `/v1` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `/v1/log/incident`
- Auth: none declared. Required headers: `X-Auth-Token`
- TypeScript: <https://skmtc.dev/neuvector/apis/neuvector-api/docs/log/incident/get.ts> (a function with typed inputs; its response is checked against the schema)

## Headers

- `X-Auth-Token` string, required

## Response `200`

Success

- RESTIncidentsData
  - `incidents` Incident[], required
    - `name` string
    - `level` string, required
    - `reported_timestamp` integer, required
    - `reported_at` string, required
    - `cluster_name` string, required
    - `response_rule_id` integer
    - `host_id` string, required
    - `host_name` string, required
    - `enforcer_id` string, required
    - `enforcer_name` string, required
    - `id` string, required
    - `workload_id` string
    - `workload_name` string
    - `workload_domain` string
    - `workload_image` string
    - `workload_service` string
    - `remote_workload_id` string
    - `remote_workload_name` string
    - `remote_workload_domain` string
    - `remote_workload_image` string
    - `remote_workload_service` string
    - `proc_name` string
    - `proc_path` string
    - `proc_cmd` string
    - `proc_real_uid` integer
    - `proc_effective_uid` integer
    - `proc_real_user` string
    - `proc_effective_user` string
    - `file_path` string
    - `file_name` string[]
    - `client_ip` string, required
    - `server_ip` string, required
    - `client_port` integer, required
    - `server_port` integer, required
    - `server_conn_port` integer, required
    - `ether_type` integer, required
    - `ip_proto` integer, required
    - `conn_ingress` boolean, required
    - `proc_parent_name` string
    - `proc_parent_path` string
    - `action` string, required
    - `group` string, required
    - `rule_id` string, required
    - `aggregation_from` integer, required
    - `count` integer
    - `message` string, required

---

[API](https://skmtc.dev/neuvector/apis/neuvector-api.md) - [All operations](https://skmtc.dev/neuvector/apis/neuvector-api/llms.txt) - [OpenAPI document](https://skmtc.dev/neuvector/apis/neuvector-api/revisions/b8d8d28840b3?raw)