SearchIncidents
Search and filter incident data on Datadog MCP Server using custom queries, sorting options, and pagination to manage and analyze specific incidents effectively.
Instructions
Search for incidents matching a certain query.
Query Parameters:
include: Specifies which types of related objects should be included in the response.
query (Required): Specifies which incidents should be returned. The query can contain any number of incident facets joined by
ANDs, along with multiple values for each of those facets joined byORs. For example:state:active AND severity:(SEV-2 OR SEV-1).sort: Specifies the order of returned incidents.
page[size]: Size for a given page. The maximum allowed value is 100.
page[offset]: Specific offset to use as the beginning of the returned page.
Responses:
200 (Success): OK
Content-Type:
application/jsonResponse Properties:
included: Included related resources that the user requested.
Example:
{
"data": "unknown_type",
"included": [
"unknown_type"
],
"meta": "unknown_type"
}400: Bad Request
Content-Type:
application/jsonResponse Properties:
errors: A list of errors.
Example:
{
"errors": [
"Bad Request"
]
}401: Unauthorized
Content-Type:
application/jsonResponse Properties:
errors: A list of errors.
Example:
{
"errors": [
"Bad Request"
]
}403: Forbidden
Content-Type:
application/jsonResponse Properties:
errors: A list of errors.
Example:
{
"errors": [
"Bad Request"
]
}404: Not Found
Content-Type:
application/jsonResponse Properties:
errors: A list of errors.
Example:
{
"errors": [
"Bad Request"
]
}429: Too many requests
Content-Type:
application/jsonResponse Properties:
errors: A list of errors.
Example:
{
"errors": [
"Bad Request"
]
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| include | No | Object related to an incident. | |
| page[offset] | No | Specific offset to use as the beginning of the returned page. | |
| page[size] | No | Size for a given page. The maximum allowed value is 100. | |
| query | Yes | Specifies which incidents should be returned. The query can contain any number of incident facets joined by `ANDs`, along with multiple values for each of those facets joined by `OR`s. For example: `state:active AND severity:(SEV-2 OR SEV-1)`. | |
| sort | No | The ways searched incidents can be sorted. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| data | Yes | ||
| meta | No | ||
| included | No | Included related resources that the user requested. |