Get incident timeline
get_incidentRequires the read scope or higher. Gets one incident and its ordered timeline: run_started, step, run_failed/cancelled/blocked, incident_opened, recovery_ping, incident_resolved, alert_delivered/failed/suppressed/pending, note. run_* events match the opening run id. incident_opened carries body_excerpt and exit_code from the ping that opened it when no run event does, so a ping with no run id shows its output. A missing field means not recorded. Alert error text is omitted. untrusted_fields names the data fields LastPing did not write (job output, exporter data or user-supplied names).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| incident_id | Yes | The incident's numeric id, from list_incidents, list_open_incidents or add_incident_note. |