API · v1 · stabil
CODEMETA OSDeveloper Center
Konsole öffnen
Entity · incidents

Incident

Schema-ID
incident
Collection
incidents
Permissions
  • Lesenincident_view
  • Anlegenincident_manage
  • Ändernincident_manage
  • Löschenincident_manage

Felder

Incident

incidents4 Permissions

Lifecycle layer over Detection records (ADR 0062)

_iduuiderforderlich
read-only
schemastringoptional
read-only
schemaVersionintegeroptional
read-only
tenantIduuiderforderlich
read-only
versionintegeroptional
≥ 1read-only
fingerprintstringerforderlich
32–128 Zeichenread-only
statusstringerforderlich
Werte
openacknowledgedinvestigatingresolvedsuppressed
severitystringerforderlich
Werte
infowarningerrorcritical
titlestringerforderlich
1–500 Zeichen
summarystringoptional
max 10000 Zeichennullable
sourcestringerforderlich
Werte
agent_alertvmalertwebhooksyntheticlokiemailmanual
sourceRefsobject[]optional
read-only
kindstringerforderlich
max 64 Zeichen
idstringerforderlich
max 256 Zeichen
firstSeenAtdatetimeerforderlich
lastSeenAtdatetimeerforderlich
countintegeroptional
≥ 1
primaryAssetIduuidoptional
nullable
affectedAssetIdsuuid[]optional
labelsobjectoptional
openedAtdatetimeerforderlich
read-only
acknowledgedAtdatetimeoptional
read-onlynullable
acknowledgedByuuidoptional
read-onlynullable
resolvedAtdatetimeoptional
read-onlynullable
resolvedByuuidoptional
read-onlynullable
resolutionstringoptional
Werte
automanualsilencedcascade
read-onlynullable
suppressedByuuidoptional
read-onlynullable
escalationStateRefstringoptional
read-onlynullable
ticketIduuidoptional
nullable
notificationsSentobject[]optional
read-only
channelstringoptional
max 32 Zeichen
sentAtdatetimeoptional
recipientIdstringoptional
nullable
silencedUntildatetimeoptional
nullable
createdBystringoptional
read-onlynullable
createdAtdatetimeoptional
read-only
updatedBystringoptional
read-onlynullable
updatedAtdatetimeoptional
read-only
deletedAtdatetimeoptional
read-onlynullable
deletedBystringoptional
read-onlynullable

Standard-Endpoints

Diese Resource folgt dem generischen CRUD-Vertrag der Plattform. Lesen Sie die Konventionen für Pagination, Idempotenz, Optimistic Locking und Audit. Die wichtigsten Endpoints:

  • GET /api/v1/incidents — Liste, paginiert + filterbar
  • GET /api/v1/incidents/<id> — Einzelne Entity
  • POST /api/v1/incidents — Anlegen
  • PATCH /api/v1/incidents/<id> — Teil-Update
  • DELETE /api/v1/incidents/<id> — Soft-Delete
  • GET /api/v1/incidents/<id>/timeline — Audit + Aktivitäten

Suche