---
title: "List incidents from Elasticsearch"
method: GET
path: "/api/v1/realtime/incidents"
tags: ["realtime"]
---

# List incidents from Elasticsearch

`GET /api/v1/realtime/incidents`

Query incidents from Elasticsearch with optional filtering by sensor_id, category, and time range. Supports pagination via limit and offset.

## Query parameters

- `sensor_id` string, nullable — Filter by sensor ID
- `category` string, nullable — Filter by incident category
- `start_time` string, date-time, nullable — Filter incidents after this ISO-8601 timestamp (e.g. 2024-01-15T10:30:00Z)
- `end_time` string, date-time, nullable — Filter incidents before this ISO-8601 timestamp (e.g. 2024-01-15T18:00:00Z)
- `limit` integer — Maximum number of incidents to return
- `offset` integer — Number of incidents to skip (for pagination)

## Response `200`

Incidents list

- IncidentListResponse — Response for GET /api/v1/realtime/incidents.
  - `status` string
  - `incidents` object[] — List of incident documents from Elasticsearch
  - `count` integer, required — Number of incidents returned
  - `total` integer, required — Total number of matching incidents in ES
  - `timestamp` string, required — ISO-8601 response timestamp

## Other responses

- `422` — Invalid timestamp format
- `500` — Elasticsearch query failed
- `503` — Elasticsearch unavailable

---

[API](https://skmtc.dev/nvidia/apis/alert-agent-api.md) · [All operations](https://skmtc.dev/nvidia/apis/alert-agent-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/nvidia/alert-agent-api/revisions/e754ab3efedd/schema)