get
/v2/Incidents
Returns a list of incidents based on privileges assigned to the authenticated Security Center user and filters specified in the query parameters.
Current limitation: the total results count value will always be null unless the IsRecipient filter is set.
Query parameters
expand
String
This query parameter allows you to retrieve sub-resources immediately instead of retrieving them in a separate request.
It is possible to expand multiple properties by delimiting them with commas, or specifying "all" to expand all sub-resources.
For the list of expandable sub-resources, please consult the **Incident** model in the **Models** section.
Example:
expand_example
dateTimeFrom
Date
date-time
This query parameter allows you to retrieve incidents that were triggered after the provided date.
<br />You can specify date in either of the following formats:
<br /><ul><li>Local date and time format: yyyy-mm-dd hh:mm:ss</li><li>UTC format: yyyy-mm-ddThh:mm:ssZ</li></ul>
Example:
2013-10-20T19:20:30+01:00
dateTimeTo
Date
date-time
This query parameter allows you to retrieve incidents that were triggered before the provided date.
<br />You can specify date in either of the following formats:
<br /><ul><li>Local date and time format: yyyy-mm-dd hh:mm:ss</li><li>UTC format: yyyy-mm-ddThh:mm:ssZ</li></ul>
Example:
2013-10-20T19:20:30+01:00
isRecipient
Boolean
This query parameter allows you to retrieve incidents for which you are a recipient or a supervisor
<br />You must specify either 'true' or 'false'.
<br /><br />Note: User cannot enable _IsRecipient_ filter and _Closed_ state filter at the same time.
Example:
true
incidentTypeIds
array[UUID]
uuid
This query parameter allows you to retrieve incidents that match the incident type identifier (the available types can be retrieved from a separate endpoint).
<br />It is possible to provide a list of identifiers by delimiting them with commas.
locationIds
array[UUID]
uuid
This query parameter allows you to retrieve incidents that match the location identifier.
<br />It is possible to provide a list of identifiers by delimiting them with commas.
ownerIds
array[UUID]
uuid
This query parameter allows you to retrieve incidents that match the user identifier.
<br />It is possible to provide a list of identifiers by delimiting them with commas.
priorityIds
array[UUID]
uuid
This query parameter allows you to retrieve incidents that match the incident priority identifier (the available priorities can be retrieved from a separate endpoint).
<br />It is possible to provide a list of identifiers by delimiting them with commas.
stateIds
array[UUID]
uuid
This query parameter allows you to retrieve incidents that match the incident state identifier (the available states can be retrieved from a separate endpoint).
<br />It is possible to provide a list of identifiers by delimiting them with commas.
<br /><br />Note: Users must have the _Third-party integration mode_ privilege or the _Incident report_ privilege.
additionalFields
array[String]
This query parameter allows you to retrieve incidents that matches every single additional field filter (each string item is a different field).
<br />The syntax we use to retrieve the additional field is in a LHS format with the fieldName, compare mode and value as the required information.
<br /><br />Format: fieldName[compareMode]=value
<br /><br />Note: Using box brackets([ ]) or the equal sign(=) as characters in the fieldName or value will break the LHS format.
<br /><br /> Compare Mode with data type:
<br />String and URL - Equals, NotEquals, Contains, DoesNotContain, StartsWith, DoesNotStartWith, EndsWith, DoesNotEndWith
<br />Number - Equals, NotEquals, GreaterThan, GreaterThanOrEquals, LessThan, LessThanOrEquals
<br />Boolean - Equals, NotEquals
<br /><br /> Examples:
<br />Name[Equals]=John (Retrieving every incident that has John as value for field name).
<br />NumberOfPeople[GreaterThan]=5 (Retrieving every incident that has more than 5 as value for field NumberOfPeople).
offset
Integer
int32
This query parameter allows you to set the number of items to be skipped.
<br />The default value for this parameter is 0.
Example:
56
limit
Integer
int32
This query parameter allows you to set the number of items to retrieve. Maximum value: 100.
<br />The default value for this parameter is 25.
Example:
56
sortBy
String
This query parameter allows you to sort the incident list based on specific incident properties defined in the Models page of this documentation.
<br />You can specify the sort preference in the following format: IncidentProperty.OrderParameter.
<br />The <em>IncidentProperty</em> should be replaced by one of the values from the <em>IncidentSortingProperties</em> enum defined in the Models page of this documentation.
<br />The <em>OrderParameter</em> should be replaced by one the following values:
<li>ascending or asc</li><li>descending or desc</li><br /><br />The default value is displayId.desc.
Example:
sortBy_example
CLIENT REQUEST
curl -X 'GET'
-H
'Accept: application/json'
'http://localhost/v2/Incidents?expand=expand_example&dateTimeFrom=2013-10-20T19:20:30+01:00&dateTimeTo=2013-10-20T19:20:30+01:00&isRecipient=true&incidentTypeIds=&locationIds=&ownerIds=&priorityIds=&stateIds=&additionalFields=&showEligibility=true&offset=56&limit=56&sortBy=sortBy_example'
Responses