Datadog · JSON Structure

Datadog Incidents Incident Attributes Structure

The attributes of an incident record

Type: object Properties: 18
AnalyticsDashboardsMonitoringPlatformT1Visualizations

IncidentAttributes is a JSON Structure definition published by Datadog, describing 18 properties. It conforms to the https://json-structure.org/meta/core/v0/# meta-schema.

Properties

title public_id state severity customer_impacted customer_impact_scope customer_impact_start customer_impact_end customer_impact_duration created modified detected resolved time_to_detect time_to_internal_response time_to_repair fields notification_handles

Meta-schema: https://json-structure.org/meta/core/v0/#

JSON Structure

Raw ↑
{
  "$schema": "https://json-structure.org/meta/core/v0/#",
  "$id": "https://raw.githubusercontent.com/api-evangelist/datadog/refs/heads/main/json-structure/datadog-incidents-incident-attributes-structure.json",
  "name": "IncidentAttributes",
  "description": "The attributes of an incident record",
  "type": "object",
  "properties": {
    "title": {
      "type": "string",
      "description": "The title of the incident describing what is affected",
      "example": "Example Monitor"
    },
    "public_id": {
      "type": "int32",
      "description": "The sequential human-readable public ID of the incident within the organization",
      "example": 42
    },
    "state": {
      "type": "string",
      "description": "The current state of the incident in its lifecycle",
      "enum": [
        "active",
        "stable",
        "resolved"
      ],
      "example": "active"
    },
    "severity": {
      "type": "string",
      "description": "The severity level of the incident",
      "enum": [
        "SEV-1",
        "SEV-2",
        "SEV-3",
        "SEV-4",
        "SEV-5",
        "UNKNOWN"
      ],
      "example": "SEV-1"
    },
    "customer_impacted": {
      "type": "boolean",
      "description": "Whether the incident is causing direct customer impact",
      "example": true
    },
    "customer_impact_scope": {
      "type": "string",
      "description": "Description of the scope of customer impact for this incident",
      "example": "example_value"
    },
    "customer_impact_start": {
      "type": "datetime",
      "description": "ISO 8601 timestamp when customer impact began",
      "example": "example_value"
    },
    "customer_impact_end": {
      "type": "datetime",
      "description": "ISO 8601 timestamp when customer impact ended",
      "example": "example_value"
    },
    "customer_impact_duration": {
      "type": "int32",
      "description": "Duration of customer impact in seconds",
      "example": 42
    },
    "created": {
      "type": "datetime",
      "description": "ISO 8601 timestamp when the incident was created",
      "example": "example_value"
    },
    "modified": {
      "type": "datetime",
      "description": "ISO 8601 timestamp when the incident was last modified",
      "example": "example_value"
    },
    "detected": {
      "type": "datetime",
      "description": "ISO 8601 timestamp when the incident was first detected",
      "example": "example_value"
    },
    "resolved": {
      "type": "datetime",
      "description": "ISO 8601 timestamp when the incident was marked as resolved",
      "example": "example_value"
    },
    "time_to_detect": {
      "type": "int32",
      "description": "Time in seconds from incident start to detection",
      "example": 42
    },
    "time_to_internal_response": {
      "type": "int32",
      "description": "Time in seconds from detection to first responder acknowledgement",
      "example": 42
    },
    "time_to_repair": {
      "type": "int32",
      "description": "Time in seconds from detection to resolution",
      "example": 42
    },
    "fields": {
      "type": "object",
      "description": "Custom field values for the incident as defined in organization settings",
      "additionalProperties": {
        "type": "object"
      }
    },
    "notification_handles": {
      "type": "array",
      "description": "List of notification handles that were paged for this incident",
      "items": {
        "type": "object"
      }
    }
  }
}