incidents
Fetch security alerts with filters for state, severity, and update time, plus ordering.
Instructions
List security incidents with filtering (state, severity, updated time range) and ordering. Relay-paginated (edges/pageInfo/totalCount). Common states: PENDING_CUSTOMER, PENDING_RQ, RESOLVED, CANCELLED. Variables: after, first, incidentFilter, incidentOrder. Example variables: {"after":"T18w","first":10,"incidentFilter":{"acknowledged":true,"assignees":[""],"closed":{"earliest":"2026-05-01T00:00:00.000Z","latest":"2026-05-01T00:00:00.000Z"},"commentFilter":{"earliestCreate":"2026-05-01T00:00:00.000Z","latestCreate":"2026-05-01T00:00:00.000Z","types":["PUBLIC"]...
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| after | No | GraphQL: String | |
| first | No | GraphQL: Int | |
| customer_slug | No | Override the x-reliaquest-customer (OpCo) header. | |
| incidentOrder | No | GraphQL: IncidentOrder | |
| incidentFilter | No | GraphQL: IncidentFilter |