Datadog · Schema

IncidentAttributes

The attributes of an incident record

AnalyticsDashboardsMonitoringPlatformT1Visualizations

Properties

Name	Type	Description
title	string	The title of the incident describing what is affected
public_id	integer	The sequential human-readable public ID of the incident within the organization
state	string	The current state of the incident in its lifecycle
severity	string	The severity level of the incident
customer_impacted	boolean	Whether the incident is causing direct customer impact
customer_impact_scope	string	Description of the scope of customer impact for this incident
customer_impact_start	string	ISO 8601 timestamp when customer impact began
customer_impact_end	string	ISO 8601 timestamp when customer impact ended
customer_impact_duration	integer	Duration of customer impact in seconds
created	string	ISO 8601 timestamp when the incident was created
modified	string	ISO 8601 timestamp when the incident was last modified
detected	string	ISO 8601 timestamp when the incident was first detected
resolved	string	ISO 8601 timestamp when the incident was marked as resolved
time_to_detect	integer	Time in seconds from incident start to detection
time_to_internal_response	integer	Time in seconds from detection to first responder acknowledgement
time_to_repair	integer	Time in seconds from detection to resolution
fields	object	Custom field values for the incident as defined in organization settings
notification_handles	array	List of notification handles that were paged for this incident

View JSON Schema on GitHub

JSON Schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/datadog/refs/heads/main/json-schema/datadog-incidents-incident-attributes-schema.json",
  "title": "IncidentAttributes",
  "description": "The attributes of an incident record",
  "type": "object",
  "properties": {
    "title": {
      "type": "string",
      "description": "The title of the incident describing what is affected",
      "example": "Example Monitor"
    },
    "public_id": {
      "type": "integer",
      "description": "The sequential human-readable public ID of the incident within the organization",
      "example": 42
    },
    "state": {
      "type": "string",
      "description": "The current state of the incident in its lifecycle",
      "enum": [
        "active",
        "stable",
        "resolved"
      ],
      "example": "active"
    },
    "severity": {
      "type": "string",
      "description": "The severity level of the incident",
      "enum": [
        "SEV-1",
        "SEV-2",
        "SEV-3",
        "SEV-4",
        "SEV-5",
        "UNKNOWN"
      ],
      "example": "SEV-1"
    },
    "customer_impacted": {
      "type": "boolean",
      "description": "Whether the incident is causing direct customer impact",
      "example": true
    },
    "customer_impact_scope": {
      "type": "string",
      "description": "Description of the scope of customer impact for this incident",
      "example": "example_value"
    },
    "customer_impact_start": {
      "type": "string",
      "format": "date-time",
      "description": "ISO 8601 timestamp when customer impact began",
      "example": "example_value"
    },
    "customer_impact_end": {
      "type": "string",
      "format": "date-time",
      "description": "ISO 8601 timestamp when customer impact ended",
      "example": "example_value"
    },
    "customer_impact_duration": {
      "type": "integer",
      "description": "Duration of customer impact in seconds",
      "example": 42
    },
    "created": {
      "type": "string",
      "format": "date-time",
      "description": "ISO 8601 timestamp when the incident was created",
      "example": "example_value"
    },
    "modified": {
      "type": "string",
      "format": "date-time",
      "description": "ISO 8601 timestamp when the incident was last modified",
      "example": "example_value"
    },
    "detected": {
      "type": "string",
      "format": "date-time",
      "description": "ISO 8601 timestamp when the incident was first detected",
      "example": "example_value"
    },
    "resolved": {
      "type": "string",
      "format": "date-time",
      "description": "ISO 8601 timestamp when the incident was marked as resolved",
      "example": "example_value"
    },
    "time_to_detect": {
      "type": "integer",
      "description": "Time in seconds from incident start to detection",
      "example": 42
    },
    "time_to_internal_response": {
      "type": "integer",
      "description": "Time in seconds from detection to first responder acknowledgement",
      "example": 42
    },
    "time_to_repair": {
      "type": "integer",
      "description": "Time in seconds from detection to resolution",
      "example": 42
    },
    "fields": {
      "type": "object",
      "description": "Custom field values for the incident as defined in organization settings",
      "additionalProperties": {
        "type": "object"
      }
    },
    "notification_handles": {
      "type": "array",
      "description": "List of notification handles that were paged for this incident",
      "items": {
        "type": "object"
      }
    }
  }
}