Incidents

Get incident details

Retrieves detailed information about a specific incident including all correlated alerts.

get/api/v2/{org_id}/alerts/incidents/{incident_id}

Request

Base URL
https://api.openobserve.ai (the document declares no server; this is the origin it was published from)
Auth
API key in header Authorization
TypeScript
https://skmtc.dev/openobserve/apis/openobserve-api-http/docs/api/v2/:org_id/alerts/incidents/:incident_id/get.ts
A function with typed inputs. Its response is checked against the schema.

org_idstring required

Organization name

incident_idstring required

Incident ID

Success

acknowledged_atinteger nullable

acknowledged_bystring nullable

alert_countinteger required

assigned_tostring nullable

created_atinteger required

first_alert_atinteger required

Timestamps in microseconds

group_valuesunknown

idstring required

KSUID (27 chars)

key_type'alert_id' | 'secondary' | 'primary'

Classification of correlation key strength for hierarchical upgrade logic

Hierarchy: AlertId (weakest) → Secondary → Primary (strongest) Upgrades only move UP the hierarchy, never down.

last_alert_atinteger required

muted_by_downtime_idstring nullable

Set while a downtime mutes this incident (D3).

org_idstring required

rca_off_reasonstring nullable

Why automatic analysis runs never start for this incident (l0_off).

resolved_atinteger nullable

severity'P1' | 'P2' | 'P3' | 'P4' required

Incident severity levels (P1 = highest priority)

status'open' | 'acknowledged' | 'resolved' required

Incident status lifecycle: Open → Acknowledged → Resolved

titlestring nullable

updated_atinteger required

{
  "alerts": [
    {
      "priority": 3
    }
  ]
}

No recorded changes to this operation across all 1 revision of this API.