View incident list

POST 
/insights/v3.0/resource/query/incidents/incidents_view

Retrieves the list of incident.

Request

Header Parameters

X-PANW-Region stringrequired

Region mapping for the tenant.

Prisma-Tenant string

A Prisma-Tenant is a unique identifier for a tenant or a subtenant within a single or multi-tenant architecture, providing precise tenant management and resource allocation.

application/json

Body

required

ack_by string

User who acknowledged the incident

acknowledged boolean

Possible values: [true, false]

Whether the incident has been acknowledged

category string

Possible values: [SC, RN, MU, Authentication, GP, Certificates, ZTNA, Prisma Access Infrastructure, DNS, Security, Application Experience, PORTAL, GATEWAY, EP]

Category of the incident

child_incidents_count integer

Number of child incidents

code string

Incident Code

correlated_alerts_count integer

Number of correlated alerts

detailed_message string

Detailed message of the incident

incident_id string

Unique identifier for the incident

parent_incidents_count integer

Number of parent incidents

raised_time integer

Timestamp when the incident was raised

severity string

Possible values: [Warning, Critical, Informational]

Severity level of the incident

status string

Possible values: [Raised, Clearing, Cleared]

Current status of the incident

status_computed stringrequired

Possible values: [Raised, ClearPending, Cleared]

Computed status of the incident

title string

Title of the incident

updated_time integer

Timestamp of last update

Responses

200

OK

application/json

Schema

Schema

data object[]
Array [
incidents object[]
Array [
ack_by string
User who acknowledged the incident
acknowledged boolean
Whether the incident has been acknowledged
category string
Category of the incident
child_incidents_count integer
Number of child incidents
code string
Incident code
correlated_alerts_count integer
Number of correlated alerts
incident_id string
Unique identifier for the incident
parent_incidents_count integer
Number of parent incidents
raised_time integer
Timestamp when the incident was raised
severity string
Severity level of the incident
status string
Current status of the incident
status_computed string
Computed status of the incident
title string
Title of the incident
updated_time integer
Timestamp of last update
]
]

Example (from schema)

{
  "data": [
    {
      "incidents": [
        {
          "ack_by": "xyz@xyz.com",
          "acknowledged": true,
          "category": "SC",
          "child_incidents_count": 0,
          "code": "INC_SC_SITE_DOWN",
          "correlated_alerts_count": 2,
          "incident_id": "3a0379f6-4d45-4e62-b119-84ca59c041d0",
          "parent_incidents_count": 0,
          "raised_time": 1731051358702,
          "severity": "Critical",
          "status": "Raised",
          "status_computed": "Raised",
          "title": "Service Connection Site ipsec-prisma-to-mel-isp1 is down",
          "updated_time": 1731051358702
        }
      ]
    }
  ]
}

Example

{
  "data": [
    {
      "incidents": [
        {
          "acknowledged": false,
          "category": "SC",
          "child_incidents_count": 0,
          "code": "INC_SC_SITE_DOWN",
          "correlated_alerts_count": 2,
          "incident_id": "3a0379f6-4d45-4e62-b119-84ca59c041d0",
          "parent_incidents_count": 0,
          "raised_time": 1731051358702,
          "severity": "Critical",
          "status": "Raised",
          "status_computed": "Raised",
          "title": "Service Connection Site ipsec-prisma-to-mel-isp1 is down",
          "updated_time": 1731051358702
        },
        {
          "acknowledged": false,
          "category": "SC",
          "child_incidents_count": 0,
          "code": "INC_SC_SITE_DOWN",
          "correlated_alerts_count": 2,
          "incident_id": "513c153b-58df-4c07-9b6c-ca10d2e81021",
          "parent_incidents_count": 0,
          "raised_time": 1731051358609,
          "severity": "Critical",
          "status": "Raised",
          "status_computed": "Raised",
          "title": "Service Connection Site ipsec-prisma-to-mel-isp2 is down",
          "updated_time": 1731051358609
        }
      ]
    }
  ]
}

Loading...