{
  "opencollection": "1.0.0",
  "info": {
    "name": "openobserve Actions Incidents API",
    "version": "0.90.0"
  },
  "items": [
    {
      "info": {
        "name": "Incidents",
        "type": "folder"
      },
      "items": [
        {
          "info": {
            "name": "List alert incidents",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "{{baseUrl}}/api/v2/:org_id/alerts/incidents",
            "params": [
              {
                "name": "org_id",
                "value": "",
                "type": "path",
                "description": "Organization name"
              },
              {
                "name": "status",
                "value": "",
                "type": "query",
                "description": "Filter by status (open, acknowledged, resolved)"
              },
              {
                "name": "limit",
                "value": "",
                "type": "query",
                "description": "Maximum number of results"
              },
              {
                "name": "offset",
                "value": "",
                "type": "query",
                "description": "Offset for pagination"
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "Authorization",
              "value": "{{Authorization}}",
              "placement": "header"
            }
          },
          "docs": "Retrieves a list of correlated alert incidents with optional status filtering and pagination."
        },
        {
          "info": {
            "name": "Get incident statistics",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "{{baseUrl}}/api/v2/:org_id/alerts/incidents/stats",
            "params": [
              {
                "name": "org_id",
                "value": "",
                "type": "path",
                "description": "Organization name"
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "Authorization",
              "value": "{{Authorization}}",
              "placement": "header"
            }
          },
          "docs": "Retrieves statistics about incidents including counts by status and severity."
        },
        {
          "info": {
            "name": "Get incident details",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "{{baseUrl}}/api/v2/:org_id/alerts/incidents/:incident_id",
            "params": [
              {
                "name": "org_id",
                "value": "",
                "type": "path",
                "description": "Organization name"
              },
              {
                "name": "incident_id",
                "value": "",
                "type": "path",
                "description": "Incident ID"
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "Authorization",
              "value": "{{Authorization}}",
              "placement": "header"
            }
          },
          "docs": "Retrieves detailed information about a specific incident including all correlated alerts."
        },
        {
          "info": {
            "name": "Trigger RCA analysis for an incident",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "{{baseUrl}}/api/v2/:org_id/alerts/incidents/:incident_id/rca",
            "params": [
              {
                "name": "org_id",
                "value": "",
                "type": "path",
                "description": "Organization name"
              },
              {
                "name": "incident_id",
                "value": "",
                "type": "path",
                "description": "Incident ID"
              },
              {
                "name": "stream",
                "value": "",
                "type": "query",
                "description": "Use streaming response (default: false)"
              },
              {
                "name": "reanalysis",
                "value": "",
                "type": "query",
                "description": "Treat this as a user-initiated reanalysis — bypasses cooldown (default: false)"
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "Authorization",
              "value": "{{Authorization}}",
              "placement": "header"
            }
          },
          "docs": "Triggers root cause analysis for an incident. Use stream=true query parameter for streaming response, otherwise returns complete result as JSON."
        },
        {
          "info": {
            "name": "Update incident fields",
            "type": "http"
          },
          "http": {
            "method": "PATCH",
            "url": "{{baseUrl}}/api/v2/:org_id/alerts/incidents/:incident_id/update",
            "params": [
              {
                "name": "org_id",
                "value": "",
                "type": "path",
                "description": "Organization name"
              },
              {
                "name": "incident_id",
                "value": "",
                "type": "path",
                "description": "Incident ID"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            },
            "auth": {
              "type": "apikey",
              "key": "Authorization",
              "value": "{{Authorization}}",
              "placement": "header"
            }
          },
          "docs": "Updates incident title, severity, or status. This endpoint is only available with enterprise features enabled."
        }
      ]
    }
  ],
  "bundled": true
}