---
title: "Get/search incident history"
method: GET
path: "/api-reporting/v2/incidents"
tags: ["Reporting"]
---

# Get/search incident history

`GET /api-reporting/v2/incidents`

Retrieve incident history for your company, searching over date ranges and with filtering options.

This API may be called a maximum of once a minute.

Incident requests are paginated with a offset and limit query string parameters.
  The query for incidents is run and offset records are skipped, after which limit records will be returned.

The default offset is 0 and the default limit is 20. The maximum value allowed for limit is 100.

Unless specified otherwise with the parameter currentPhase, the response will only contain resolved incidents.

On return, the total number of records available for that query will be returned in the payload as 'total'.

## Query parameters

- `offset` number
- `limit` number
- `entityId` string
- `incidentNumber` string
- `startedAfter` string
- `startedBefore` string
- `host` string
- `service` string
- `currentPhase` string
- `routingKey` string

## Headers

- `X-VO-Api-Id` string, required
- `X-VO-Api-Key` string, required

## Response `200`

The list of incidents matching the request filters

- ReportingIncidentList — The list of incidents in various states
  - `offset` integer — The pagination offset
  - `limit` integer — The maximum number of incidents to fetch
  - `total` integer — The total incidents matching the supplied parameters
  - `incidents` ReportingIncidentInfo[] — The list of incidents matching the supplied parameters, up to the provided limit.
    - `alertCount` number — The number of alerts received for this incident
    - `currentPhase` 'RESOLVED' | 'UNACKED' | 'ACKED' — The current phase of the incident can be resolved, triggered (UNACKED) or acknowledged (ACKED).
    - `entityDisplayName` string — The display name of the incident. This is the "Incident Description" field when manually creating an incident.
    - `entityId` string — The unique identification of the entity being monitored that caused the incident
    - `entityState` string — The entity's state
    - `entityType` string — The type of the entity
    - `host` string — The host on which the incident occurred
    - `incidentNumber` string — The VictorOps incident number
    - `lastAlertId` string — The UUID of the last alert for the incident
    - `lastAlertTime` string — The time of the last alert received for the incident The format of the last alert time is in `yyyy-MM-dd'T'HH:mm:ssZ`
    - `routingKey` string — The original routing of the incident Routing keys tie the alerts from your monitoring tools to the specific team (or escalation policy) in VictorOps
    - `service` string — The service name causing the incident (if any)
    - `startTime` string — The time the incident started The format of the start time is in `yyyy-MM-dd'T'HH:mm:ssZ`
    - `pagedTeams` string[] — The teams that were paged for the incident This is a list of the team slugs of the teams that were paged. The team slug is in the format `team-[\w\d]{16}`
    - `pagedUsers` string[] — A list of the Victorops usernames of the users that were paged for the incident.
    - `pagedPolicies` EscalationPolicyInfo[] — The escalation policy summaries that were triggered for the incident
      - `policy` EscalationPolicySummary, required — A summary containing minimal, high-level information about an escalation policy.
        - `name` string, required — The name of this escalation policy
        - `slug` string, required — A unique identifier for this escalation policy. The slug is in the format `pol-[\w\d]{16}`
        - `_selfUrl` string, required — This is a URI that is generated for this escalation policy. It points to the entire escalation policy resource. and can be used to get detailed information about this escalation policy instead of just the summary.
      - `team` Team, required
        - `name` string, required — The team name
        - `slug` string, required — The unique identifier for this team. The slug is in the format `team-[\w\d]{16}`
    - `transitions` IncidentTransition[] — Transitions of the incident state over time
      - `name` string — The transition name
      - `at` string — The time of the transition
      - `by` string — The user that caused the transition (if any)
      - `message` string — The message entered by that user (if any)
      - `manually` boolean — If the incident transition was caused by a person
      - `alertId` string — The unique alert ID that caused the transition
      - `alertUrl` string — A URL to retrieve the details of the alert that caused the transition

## Other responses

- `400` — Problem with the request arguments. The response payload may include an error message.
- `401` — Authentication parameters missing
- `403` — Authentication failed or rate-limit reached
- `404` — Path not found
- `500` — Internal Server Error

---

[API](https://skmtc.net/victorops/apis/victorops-api.md) · [All operations](https://skmtc.net/victorops/apis/victorops-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/victorops/victorops-api/revisions/7a7391256058/schema)