Get incident timeline
get_incidentRequires the read scope or higher. Gets one incident and its ordered timeline: run_started, step, run_failed/cancelled/blocked, incident_opened, recovery_ping (the success that closed it), incident_resolved, alert_delivered/failed/suppressed/pending (destination and attempts), note. For what the run was doing, who was paged and what was tried. run_* events are matched on the run id recorded at opening, so none means no run was recorded. Delivery error text is omitted. untrusted_fields names the data fields LastPing did not write (job output, exporter data or user-supplied names).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| incident_id | Yes | The incident's numeric id, from list_incidents, list_open_incidents or add_incident_note. |