---
title: "Get current incident information"
method: GET
path: "/api-public/v1/incidents"
tags: ["Incidents"]
---

# Get current incident information

`GET /api-public/v1/incidents`

Get a list of the currently open, acknowledged and recently resolved incidents.

This API may be called a maximum of 2 times per second.

## Headers

- `X-VO-Api-Id` string, required
- `X-VO-Api-Key` string, required

## Response `200`

The set of incidents.

- IncidentList — The list of incidents in various states
  - `incidents` IncidentInfo[] — The incident data
    - `incidentNumber` string — The VictorOps incident number
    - `startTime` string — The time the incident started The format of the start time is in `yyyy-MM-dd'T'HH:mm:ssZ`.
    - `currentPhase` 'RESOLVED' | 'UNACKED' | 'ACKED' — The current phase of the incident can be resolved, triggered (UNACKED) or acknowledged (ACKED).
    - `alertCount` number — The number of alerts received for this incident
    - `lastAlertTime` string — The time of the last alert received for the incident The format of the last alert time is in `yyyy-MM-dd'T'HH:mm:ssZ`.
    - `lastAlertId` string — The UUID of the last alert for the incident
    - `entityId` string — The unique identification of the entity being monitored that caused the incident
    - `host` string — The host on which the incident occurred
    - `service` string — The service name causing the incident (if any)
    - `pagedUsers` string[] — A list of the Victorops usernames of the users that were paged for the incident.
    - `pagedTeams` string[] — The teams that were paged for the incident This is a list of the team slugs of the teams that were paged. The team slug is in the format `team-[\w\d]{16}`
    - `pagedPolicies` EscalationPolicyInfo[] — The escalation policy summaries that were triggered for the incident
      - `policy` EscalationPolicySummary, required — A summary containing minimal, high-level information about an escalation policy.
        - `name` string, required — The name of this escalation policy
        - `slug` string, required — A unique identifier for this escalation policy. The slug is in the format `pol-[\w\d]{16}`
        - `_selfUrl` string, required — This is a URI that is generated for this escalation policy. It points to the entire escalation policy resource. and can be used to get detailed information about this escalation policy instead of just the summary.
      - `team` Team, required
        - `name` string, required — The team name
        - `slug` string, required — The unique identifier for this team. The slug is in the format `team-[\w\d]{16}`
    - `transitions` IncidentTransition[] — Transitions of the incident state over time
      - `name` string — The transition name
      - `at` string — The time of the transition
      - `by` string — The user that caused the transition (if any)
      - `message` string — The message entered by that user (if any)
      - `manually` boolean — If the incident transition was caused by a person
      - `alertId` string — The unique alert ID that caused the transition
      - `alertUrl` string — A URL to retrieve the details of the alert that caused the transition
    - `firstAlertUuid` string — The UUID of the first alert for this incident. You can use this id to call the get alert endpoint in the Alerts section (`/api-public/v1/alerts/{uuid}`) to get more information about the alert that started this incident. The state message field for the first alert will have the original, more detailed description of the incident.
    - `monitorName` string — This is the name of the creator of this incident. If this incident was manually triggered, this is the username of the user that triggered it. If this incident was not manually triggered, this is the name of the service that triggered it. The format for manual creation is `vouser-{username}`. The format for a system creating an incident is `{service-name}`.
    - `monitorType` 'UNKNOWN' | 'PINGDOM' | 'NAGIOS' | 'HEALTHCHECKER' | 'API' | 'Cloudwatch' | 'NewRelic' | 'Zabbix' | 'Email' | 'Splunk' | 'ServiceNow' | 'Manual' | 'etc' — The type of the monitor of the incident, as named in the monitorName, that triggered the incident. Either manual (if a user created the incident) or the name of the service that triggered the incident

## Other responses

- `400` — Problem with the request arguments. The response payload may include an error message.
- `401` — Authentication parameters missing
- `403` — Authentication failed or rate-limit reached
- `404` — Path not found
- `500` — Internal Server Error

---

[API](https://skmtc.net/victorops/apis/victorops-api.md) · [All operations](https://skmtc.net/victorops/apis/victorops-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/victorops/victorops-api/revisions/7a7391256058/schema)