SearchIncidents

Search and filter incident data on Datadog MCP Server using custom queries, sorting options, and pagination to manage and analyze specific incidents effectively.

Instructions

Search for incidents matching a certain query.

Query Parameters:

include: Specifies which types of related objects should be included in the response.
query (Required): Specifies which incidents should be returned. The query can contain any number of incident facets joined by ANDs, along with multiple values for each of those facets joined by ORs. For example: state:active AND severity:(SEV-2 OR SEV-1).
sort: Specifies the order of returned incidents.
page[size]: Size for a given page. The maximum allowed value is 100.
page[offset]: Specific offset to use as the beginning of the returned page.

Responses:

200 (Success): OK
- Content-Type: application/json
- Response Properties:
  - included: Included related resources that the user requested.
- Example:

{
  "data": "unknown_type",
  "included": [
    "unknown_type"
  ],
  "meta": "unknown_type"
}

400: Bad Request
- Content-Type: application/json
- Response Properties:
  - errors: A list of errors.
- Example:

{
  "errors": [
    "Bad Request"
  ]
}

401: Unauthorized
- Content-Type: application/json
- Response Properties:
  - errors: A list of errors.
- Example:

{
  "errors": [
    "Bad Request"
  ]
}

403: Forbidden
- Content-Type: application/json
- Response Properties:
  - errors: A list of errors.
- Example:

{
  "errors": [
    "Bad Request"
  ]
}

404: Not Found
- Content-Type: application/json
- Response Properties:
  - errors: A list of errors.
- Example:

{
  "errors": [
    "Bad Request"
  ]
}

429: Too many requests
- Content-Type: application/json
- Response Properties:
  - errors: A list of errors.
- Example:

{
  "errors": [
    "Bad Request"
  ]
}

Input Schema

Name	Required	Description
`include`	No	Object related to an incident.
`page[offset]`	No	Specific offset to use as the beginning of the returned page.
`page[size]`	No	Size for a given page. The maximum allowed value is 100.
`query`	Yes	Specifies which incidents should be returned. The query can contain any number of incident facets joined by `ANDs`, along with multiple values for each of those facets joined by `OR`s. For example: `state:active AND severity:(SEV-2 OR SEV-1)`.
`sort`	No	The ways searched incidents can be sorted.

Input Schema (JSON Schema)

{
  "properties": {
    "include": {
      "description": "Object related to an incident.",
      "enum": [
        "users",
        "attachments"
      ],
      "type": "string",
      "x-enum-varnames": [
        "USERS",
        "ATTACHMENTS"
      ]
    },
    "page[offset]": {
      "default": 0,
      "description": "Specific offset to use as the beginning of the returned page.",
      "example": 0,
      "format": "int64",
      "type": "integer"
    },
    "page[size]": {
      "default": 10,
      "description": "Size for a given page. The maximum allowed value is 100.",
      "example": 10,
      "format": "int64",
      "type": "integer"
    },
    "query": {
      "description": "Specifies which incidents should be returned. The query can contain any number of incident facets\njoined by `ANDs`, along with multiple values for each of those facets joined by `OR`s. For\nexample: `state:active AND severity:(SEV-2 OR SEV-1)`.",
      "type": "string"
    },
    "sort": {
      "description": "The ways searched incidents can be sorted.",
      "enum": [
        "created",
        "-created"
      ],
      "type": "string",
      "x-enum-varnames": [
        "CREATED_ASCENDING",
        "CREATED_DESCENDING"
      ]
    }
  },
  "required": [
    "query"
  ],
  "type": "object"
}

Datadog MCP Server

SearchIncidents

Instructions

Input Schema

Input Schema (JSON Schema)

Other Tools from Datadog MCP Server

Related Tools

MCP directory API