List Incidents

Returns a list of filtered Incidents. The Incidents are sorted by creation_date, with the most recent Incident appearing last.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input Name	Description	Required
All Teams	Filter incidents based on the teams. (Default: Filter incidents based on all teams)	Optional
Escalation policy unique ids	Jinja templated text containing the comma separated list of escalation policy unique ids. Example : 52fe68d3-cead-40b3-b0ac-d616d38d8e32, 43f78w4-flvm-87c4-b0ac-d616d38d8e32	Optional
From Date	Jinja templated date-time string that represents from_date and filters incidents whose creation_date is greater than the specified from_date.. Example: 2023-02-29	Optional
Postmortem Filter	Jinja templated integer that represents whether the postmortem is attached to the incident or not. (Default '-1')	Optional
Priority Id(s)	Jinja templated text containing comma separated team priority unique ids. Example : 7064efff-55f2-448b-92e5-a3a53179aa76, 4563efff-88g3-987l-92e5-b6b4312aa76	Optional
Priority Name	Jinja templated text containing name of the Team priority	Optional
Service Unique Id(s)	Jinja templated text containing comma separated service unique ids	Optional
SLA unique Ids	Jinja templated text containing team SLA unique ids	Optional
Status	Status of the Incident. (Default : Triggered Incidents)	Optional
Team Tag Id(s)	Jinja templated text containing comma separated team tag unique ids	Optional
Team Unique Id(s)	Jinja templated text containing comma separated team unique ids	Optional
To Date	Jinja templated date-time string that represents to_date and filters incidents whose creation_date is lesser than the specified to_date.. Example: 2023-02-01	Optional
Usernames	Jinja templated text containing comma separated usernames	Optional
Limit	Jinja-templated text that specifies the maximum number of records to return (default is 30). Keep the limit as low as possible based on actual requirements, since after the first 30 records, a 1-second delay is applied for every additional 10 records fetched.	Optional

Output

JSON containing the following items:

{
  "exit_code": "0",
  "result": "{\"results\":[{\"acknowledged_date\":null,\"assigned_to\":\"beb77c52-124a-4c8e-830d-6\",\"assigned_to_name\":\"Luke Wilkinson\",\"creation_date\":\"2025-05-29T07:16:34.872153Z\",\"incident_number\":162,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":1,\"unique_id\":\"Rw7aWQgc3W3AcwQksRjK7A\",\"title\":\"Test Incident\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":null,\"service_object\":{\"name\":\"Email from Cyber NSW (email forward)\",\"unique_id\":\"260684b4-31ed-492e-ac63-0c5e1aa8a66c\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-05-29T07:06:15.210814Z\",\"assigned_to\":\"beb77c52-124a-4c8e-830d-6\",\"assigned_to_name\":\"Luke Wilkinson\",\"creation_date\":\"2025-05-29T07:05:55.801678Z\",\"incident_number\":161,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"J3GqDm48vEvJ7pK7KnPn9R\",\"title\":\"Test Incident\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-05-29T07:07:47.984454Z\",\"service_object\":{\"name\":\"Email from Cyber NSW (email forward)\",\"unique_id\":\"260684b4-31ed-492e-ac63-0c5e1aa8a66c\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-05-29T07:06:59.567770Z\",\"assigned_to\":\"beb77c52-124a-4c8e-830d-6\",\"assigned_to_name\":\"Luke Wilkinson\",\"creation_date\":\"2025-05-29T07:04:20.166091Z\",\"incident_number\":160,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":2,\"unique_id\":\"o2ZtW8WaKkoMSCi7RhjCzU\",\"title\":\"Test Incident\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":null,\"service_object\":{\"name\":\"Email from Cyber NSW (email forward)\",\"unique_id\":\"260684b4-31ed-492e-ac63-0c5e1aa8a66c\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-05-22T08:56:47.013517Z\",\"assigned_to\":\"e31d8f40-b37b-4da2-99a8-b\",\"assigned_to_name\":\"Glenn Barber\",\"creation_date\":\"2025-05-22T08:45:52.393283Z\",\"incident_number\":159,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"nTdAidKp8Ho3yiwSxMpsqu\",\"title\":\"[Information Security ([email protected])] FW: FOR ACTION: ALERT [HIGH] - Critical Authentication Bypass in Samlify SSO Library (CVSA-2025-16)\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-05-22T22:46:26.984775Z\",\"service_object\":{\"name\":\"Email from Cyber NSW (email forward)\",\"unique_id\":\"260684b4-31ed-492e-ac63-0c5e1aa8a66c\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-05-19T01:49:08.381517Z\",\"assigned_to\":\"beb77c52-124a-4c8e-830d-6\",\"assigned_to_name\":\"Luke Wilkinson\",\"creation_date\":\"2025-05-19T01:31:39.120355Z\",\"incident_number\":158,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"oKw4xYWYZdYG7ZNPR4HiXJ\",\"title\":\"New Alert from Crowdstrike for trigger Alert\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-05-19T01:49:14.962310Z\",\"service_object\":{\"name\":\"Crowd Strike\",\"unique_id\":\"17ab03b4-ffcf-4435-99bb-090db9d36caa\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-05-14T00:16:55.041896Z\",\"assigned_to\":\"e31d8f40-b37b-4da2-99a8-b\",\"assigned_to_name\":\"Glenn Barber\",\"creation_date\":\"2025-05-13T21:55:44.528933Z\",\"incident_number\":157,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"Us5PfdeeLrqcwgx2DJ9fbz\",\"title\":\"[Information Security ([email protected])] FW: [CRITICAL ALERT: ACT NOW] - Multiple Vulnerabilities In Ivanti Endpoint\\tManager Mobile (Ivanti EPMM)\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-05-14T00:16:55.041896Z\",\"service_object\":{\"name\":\"Email from Cyber NSW (email forward)\",\"unique_id\":\"260684b4-31ed-492e-ac63-0c5e1aa8a66c\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-05-02T06:20:48.504052Z\",\"assigned_to\":\"beb77c52-124a-4c8e-830d-6\",\"assigned_to_name\":\"Luke Wilkinson\",\"creation_date\":\"2025-05-02T06:20:15.226464Z\",\"incident_number\":156,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"4DjfzQbpq3wSAgj3hzHxcr\",\"title\":\"[Information Security ([email protected])] FW: FOR ACTION: ALERT [HIGH] CSTA-2025-09 - NSW local council targeted by payment redirection scam impersonating Veolia [TLP:AMBER]\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-05-02T06:33:47.267065Z\",\"service_object\":{\"name\":\"Email from Cyber NSW (email forward)\",\"unique_id\":\"260684b4-31ed-492e-ac63-0c5e1aa8a66c\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-28T01:14:27.722410Z\",\"assigned_to\":\"e31d8f40-b37b-4da2-99a8-b\",\"assigned_to_name\":\"Glenn Barber\",\"creation_date\":\"2025-04-27T23:46:14.313229Z\",\"incident_number\":155,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"HVgyUhSP7xNkDipJofu5hP\",\"title\":\"[Information Security ([email protected])] FW: FOR ACTION: ALERT [HIGH] -SAP zero-day allows for unauthenticated file upload (CSVA-2025-13) [TLP:GREEN]\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-28T01:14:27.722410Z\",\"service_object\":{\"name\":\"Email from Cyber NSW (email forward)\",\"unique_id\":\"260684b4-31ed-492e-ac63-0c5e1aa8a66c\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-15T01:52:03.231765Z\",\"assigned_to\":\"4d6f1791-7afa-47b4-9ee7-d\",\"assigned_to_name\":\"Adis Bilanovic\",\"creation_date\":\"2025-04-15T01:51:29.074393Z\",\"incident_number\":154,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"C9qZc4PAkhtPpvCu7thHRh\",\"title\":\"New Alert from Crowdstrike for trigger Alert\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:07:02.779720Z\",\"service_object\":{\"name\":\"Crowd Strike\",\"unique_id\":\"17ab03b4-ffcf-4435-99bb-090db9d36caa\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-15T02:23:03.091334Z\",\"assigned_to\":null,\"assigned_to_name\":null,\"creation_date\":\"2025-04-15T01:51:27.671429Z\",\"incident_number\":153,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"VdiFZyyH2vZHJs3n8bdZHB\",\"title\":\"New Alert from Crowdstrike for trigger Alert\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:07:03.160307Z\",\"service_object\":{\"name\":\"Crowd Strike\",\"unique_id\":\"17ab03b4-ffcf-4435-99bb-090db9d36caa\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-15T02:23:06.334256Z\",\"assigned_to\":null,\"assigned_to_name\":null,\"creation_date\":\"2025-04-15T01:51:26.267261Z\",\"incident_number\":152,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"mY8kvHFESrofGW9SAnAdDa\",\"title\":\"New Alert from Crowdstrike for trigger Alert\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:07:03.591233Z\",\"service_object\":{\"name\":\"Crowd Strike\",\"unique_id\":\"17ab03b4-ffcf-4435-99bb-090db9d36caa\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-15T02:23:09.520333Z\",\"assigned_to\":null,\"assigned_to_name\":null,\"creation_date\":\"2025-04-15T01:44:33.165353Z\",\"incident_number\":151,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"PKQQAn7ZVsAcdEJDknYihe\",\"title\":\"New Alert from Crowdstrike for trigger Alert\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:07:04.056653Z\",\"service_object\":{\"name\":\"Crowd Strike\",\"unique_id\":\"17ab03b4-ffcf-4435-99bb-090db9d36caa\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-15T02:23:14.716959Z\",\"assigned_to\":null,\"assigned_to_name\":null,\"creation_date\":\"2025-04-15T01:44:31.761175Z\",\"incident_number\":150,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"3tELafF4UCHvz8qPz7UwXY\",\"title\":\"New Alert from Crowdstrike for trigger Alert\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:07:04.452786Z\",\"service_object\":{\"name\":\"Crowd Strike\",\"unique_id\":\"17ab03b4-ffcf-4435-99bb-090db9d36caa\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-15T02:23:17.675735Z\",\"assigned_to\":null,\"assigned_to_name\":null,\"creation_date\":\"2025-04-15T01:44:30.362547Z\",\"incident_number\":149,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"PHJvGTpbRcy5xvDGn6XEJB\",\"title\":\"New Alert from Crowdstrike for trigger Alert\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:07:04.948621Z\",\"service_object\":{\"name\":\"Crowd Strike\",\"unique_id\":\"17ab03b4-ffcf-4435-99bb-090db9d36caa\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-11T01:31:50.681658Z\",\"assigned_to\":\"4d6f1791-7afa-47b4-9ee7-d\",\"assigned_to_name\":\"Adis Bilanovic\",\"creation_date\":\"2025-04-11T01:08:31.414167Z\",\"incident_number\":148,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"DDymQMsRwb2iCMRg3DXYjE\",\"title\":\"[Information Security ([email protected])] FW: [CRITICAL ALERT: ACT NOW] - Exploitation of existing Fortinet Vulnerabilities\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:10:12.475920Z\",\"service_object\":{\"name\":\"Email from Cyber NSW (email forward)\",\"unique_id\":\"260684b4-31ed-492e-ac63-0c5e1aa8a66c\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-09T00:12:11.983206Z\",\"assigned_to\":\"3a54e758-9bd5-4f96-9c87-7\",\"assigned_to_name\":\"Scott Bedford\",\"creation_date\":\"2025-04-09T00:11:38.322602Z\",\"incident_number\":147,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"YnDCtBsrnNzNfbDoUaxgtd\",\"title\":\"[Information Security ([email protected])] FW: FOR ACTION: ALERT [HIGH] - FortiSwitch vulnerable to unverified password change (CSVA-2025-12) [TLP:GREEN]\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:10:12.961942Z\",\"service_object\":{\"name\":\"Email from Cyber NSW (email forward)\",\"unique_id\":\"260684b4-31ed-492e-ac63-0c5e1aa8a66c\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-08T03:30:01.118218Z\",\"assigned_to\":null,\"assigned_to_name\":null,\"creation_date\":\"2025-04-08T03:09:35.432408Z\",\"incident_number\":146,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"CmzXZakaQxZtsbGAt8o7bF\",\"title\":\"New Alert from Crowdstrike for trigger Alert\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:07:05.427512Z\",\"service_object\":{\"name\":\"Crowd Strike\",\"unique_id\":\"17ab03b4-ffcf-4435-99bb-090db9d36caa\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-08T03:30:04.873364Z\",\"assigned_to\":null,\"assigned_to_name\":null,\"creation_date\":\"2025-04-08T03:09:34.328809Z\",\"incident_number\":145,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"HNTAVB7Ko3QFpJU4naQJ49\",\"title\":\"New Alert from Crowdstrike for trigger Alert\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:07:05.834126Z\",\"service_object\":{\"name\":\"Crowd Strike\",\"unique_id\":\"17ab03b4-ffcf-4435-99bb-090db9d36caa\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-08T03:30:08.703522Z\",\"assigned_to\":null,\"assigned_to_name\":null,\"creation_date\":\"2025-04-08T03:09:34.032645Z\",\"incident_number\":144,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"UotTspzWarYbhEaTWHT2z7\",\"title\":\"New Alert from Crowdstrike for trigger Alert\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:07:06.221686Z\",\"service_object\":{\"name\":\"Crowd Strike\",\"unique_id\":\"17ab03b4-ffcf-4435-99bb-090db9d36caa\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-08T03:30:13.711242Z\",\"assigned_to\":null,\"assigned_to_name\":null,\"creation_date\":\"2025-04-08T03:08:24.618399Z\",\"incident_number\":143,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"TpTxqeDagKvesHfRujRFEY\",\"title\":\"New Alert from Crowdstrike for trigger Alert\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:07:06.592227Z\",\"service_object\":{\"name\":\"Crowd Strike\",\"unique_id\":\"17ab03b4-ffcf-4435-99bb-090db9d36caa\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-08T03:30:17.762850Z\",\"assigned_to\":null,\"assigned_to_name\":null,\"creation_date\":\"2025-04-08T03:04:00.689629Z\",\"incident_number\":142,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"PXrhRywWcYhk8YDUZMyefh\",\"title\":\"New Alert from Crowdstrike for trigger Alert\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:07:24.130555Z\",\"service_object\":{\"name\":\"Crowd Strike\",\"unique_id\":\"17ab03b4-ffcf-4435-99bb-090db9d36caa\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-08T03:30:21.447736Z\",\"assigned_to\":null,\"assigned_to_name\":null,\"creation_date\":\"2025-04-08T03:04:00.340883Z\",\"incident_number\":141,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"GvU6wZowfLS5J8iXxDmFD2\",\"title\":\"New Alert from Crowdstrike for trigger Alert\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:07:24.606381Z\",\"service_object\":{\"name\":\"Crowd Strike\",\"unique_id\":\"17ab03b4-ffcf-4435-99bb-090db9d36caa\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-08T03:30:25.624081Z\",\"assigned_to\":null,\"assigned_to_name\":null,\"creation_date\":\"2025-04-08T02:58:22.942218Z\",\"incident_number\":140,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"FyAJx3V8oUHPsvxV7g4Jnm\",\"title\":\"New Alert from Crowdstrike for trigger Alert\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:07:24.990541Z\",\"service_object\":{\"name\":\"Crowd Strike\",\"unique_id\":\"17ab03b4-ffcf-4435-99bb-090db9d36caa\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-08T03:29:53.638308Z\",\"assigned_to\":null,\"assigned_to_name\":null,\"creation_date\":\"2025-04-08T02:58:22.651801Z\",\"incident_number\":139,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"93nJhk9Dbj3r8a7cLKdcsr\",\"title\":\"New Alert from Crowdstrike for trigger Alert\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:07:25.535605Z\",\"service_object\":{\"name\":\"Crowd Strike\",\"unique_id\":\"17ab03b4-ffcf-4435-99bb-090db9d36caa\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-08T03:29:40.559708Z\",\"assigned_to\":null,\"assigned_to_name\":null,\"creation_date\":\"2025-04-08T02:58:19.843023Z\",\"incident_number\":138,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"AcbLpQ8wi7Nb9ZpEo9Kzso\",\"title\":\"New Alert from Crowdstrike for trigger Alert\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:07:25.915299Z\",\"service_object\":{\"name\":\"Crowd Strike\",\"unique_id\":\"17ab03b4-ffcf-4435-99bb-090db9d36caa\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-08T02:51:43.830349Z\",\"assigned_to\":\"3a54e758-9bd5-4f96-9c87-7\",\"assigned_to_name\":\"Scott Bedford\",\"creation_date\":\"2025-04-08T02:51:00.299093Z\",\"incident_number\":137,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"9WvmrnqypNDGY2fxbZ2UKa\",\"title\":\"New Alert from Crowdstrike for trigger Alert\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:07:26.277972Z\",\"service_object\":{\"name\":\"Crowd Strike\",\"unique_id\":\"17ab03b4-ffcf-4435-99bb-090db9d36caa\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-08T02:51:31.609348Z\",\"assigned_to\":\"3a54e758-9bd5-4f96-9c87-7\",\"assigned_to_name\":\"Scott Bedford\",\"creation_date\":\"2025-04-08T02:51:00.015392Z\",\"incident_number\":136,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"PTZGLovEGQyWsu57cyLa2g\",\"title\":\"New Alert from Crowdstrike for trigger Alert\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:07:26.646095Z\",\"service_object\":{\"name\":\"Crowd Strike\",\"unique_id\":\"17ab03b4-ffcf-4435-99bb-090db9d36caa\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-08T02:51:39.588987Z\",\"assigned_to\":\"3a54e758-9bd5-4f96-9c87-7\",\"assigned_to_name\":\"Scott Bedford\",\"creation_date\":\"2025-04-08T02:50:58.611994Z\",\"incident_number\":135,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"XoQauSa4vpiMHdv9x8SgUL\",\"title\":\"New Alert from Crowdstrike for trigger Alert\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:07:27.048961Z\",\"service_object\":{\"name\":\"Crowd Strike\",\"unique_id\":\"17ab03b4-ffcf-4435-99bb-090db9d36caa\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-08T02:38:38.425839Z\",\"assigned_to\":\"3a54e758-9bd5-4f96-9c87-7\",\"assigned_to_name\":\"Scott Bedford\",\"creation_date\":\"2025-04-08T02:31:06.194027Z\",\"incident_number\":134,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"cfm9WosGCyCo9b3JXegTmY\",\"title\":\"New Alert from Crowdstrike for trigger Alert\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:07:27.499424Z\",\"service_object\":{\"name\":\"Crowd Strike\",\"unique_id\":\"17ab03b4-ffcf-4435-99bb-090db9d36caa\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]},{\"acknowledged_date\":\"2025-04-08T02:38:33.817387Z\",\"assigned_to\":\"3a54e758-9bd5-4f96-9c87-7\",\"assigned_to_name\":\"Scott Bedford\",\"creation_date\":\"2025-04-08T02:31:04.799968Z\",\"incident_number\":133,\"is_child_incident\":false,\"is_parent_incident\":false,\"status\":3,\"unique_id\":\"KDhooWYMg9pd8UpjjPU4fF\",\"title\":\"New Alert from Crowdstrike for trigger Alert\",\"postmortems\":[],\"sla_object\":null,\"sla\":null,\"team_priority_object\":null,\"resolved_date\":\"2025-04-30T00:07:27.873567Z\",\"service_object\":{\"name\":\"Crowd Strike\",\"unique_id\":\"17ab03b4-ffcf-4435-99bb-090db9d36caa\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"team_name\":\"Cyber Security Team\"},\"snooze_time\":null,\"snoozed_till\":null,\"urgency\":1,\"tags\":[]}],\"count\":30,\"error\":null,\"has_error\":false}",
  "stdout": "",
  "stderr": "",
  "start_node": ""
}

Create Incident

Creates an incident by setting the values of all the required parameters passed in the request body.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input Name	Description	Required
Summary	Jinja templated text that represents the incident's summary	Optional
Status	Incident's status.Default is Triggered	Optional
Title	Jinja templated text that represents the incident's title	Required
Service	Jinja templated text that represents the service's unique_id	Required
Team Priority	Jinja templated text that represents the priority's unique_id	Optional
Username	Jinja templated text that represents username of the user incident is assigned	Optional
Escalation Policy	Jinja templated text that represents the escalation policy's unique_id	Optional
SLA Unique Id	Jinja templated text that represents the SLA's unique_id	Optional

Output

JSON containing the following items:

{
  "exit_code": "0",
  "result": "{\"parent_incident\":null,\"team_priority\":null,\"postmortems\":[],\"incident_key\":\"cGrBH5BoFWHDkWmhbh566c\",\"acknowledged_date\":null,\"escalation_policy_object\":{\"unique_id\":\"68ead823-9345-4581-b05b-c8ad3ad2eb6a\",\"name\":\"Default Escalation Policy\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\"},\"resolved_date\":null,\"unique_id\":\"Rw7aWQgc3W3AcwQksRjK7A\",\"tags\":[],\"context_window_start\":null,\"incident_number\":162,\"postmortem_assignee\":null,\"team_priority_object\":null,\"service\":\"260684b4-31ed-492e-ac63-0c5e1aa8a66c\",\"urgency\":1,\"creation_date\":\"2025-05-29T07:16:34.872153Z\",\"service_object\":{\"name\":\"Email from Cyber NSW (email forward)\",\"creation_date\":\"2023-11-01T00:53:33.749819Z\",\"summary\":\"\",\"description\":\"\",\"unique_id\":\"260684b4-31ed-492e-ac63-0c5e1aa8a66c\",\"auto_resolve_timeout\":0,\"created_by\":null,\"team_priority\":null,\"task_template\":null,\"acknowledgement_timeout\":0,\"acknowledgement_timeout_enabled\":false,\"status\":1,\"escalation_policy\":\"68ead823-9345-4581-b05b-c8ad3ad2eb6a\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"sla\":null,\"collation_time\":0,\"collation\":0,\"under_maintenance\":false,\"team_name\":\"Cyber Security Team\"},\"has_error\":false,\"assigned_to\":null,\"snoozed_till\":null,\"error\":null,\"status\":1,\"context_window_end\":null,\"merged_with\":null,\"escalation_policy\":\"68ead823-9345-4581-b05b-c8ad3ad2eb6a\",\"title\":\"Test Incident\",\"sla_object\":null,\"assigned_to_name\":\"\",\"snooze_time\":null,\"summary\":\"\\n\\n[Created by: Luke Wilkinson([email protected])]\",\"sla\":null,\"is_parent_incident\":false}",
  "stdout": "",
  "stderr": "",
  "start_node": ""
}

Update Incident

Updates the specified Incident by setting the values of the parameters passed in the request body

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input Name	Description	Required
Incident ID	Jinja templated text that represents the incident's unique ID	Required
Summary	Jinja templated text that represents the incident's summary	Optional
Status	An integer that represents the Incident's status. . Default is Triggered	Optional
Title	Jinja templated text that represents the incident's title	Required
Service	Jinja templated text that represents the service's unique_id	Required
Team Priority	Jinja templated text that represents the priority's unique_id	Optional
Username Incident is assigned	Jinja templated text that represents username the incident is assigned to	Optional
Escalation Policy	Jinja templated text that represents the escalation policy's unique_id	Optional
SLA Unique Id	Jinja templated text that represents the SLA object's unique_id	Optional

Output

JSON containing the following items:

{
  "exit_code": "0",
  "result": "{\"parent_incident\":null,\"team_priority\":null,\"postmortems\":[],\"incident_key\":\"cGrBH5BoFWHDkWmhbh566c\",\"acknowledged_date\":\"2025-05-29T07:18:14.622761Z\",\"escalation_policy_object\":{\"unique_id\":\"68ead823-9345-4581-b05b-c8ad3ad2eb6a\",\"name\":\"Default Escalation Policy\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\"},\"resolved_date\":null,\"unique_id\":\"Rw7aWQgc3W3AcwQksRjK7A\",\"tags\":[],\"context_window_start\":null,\"incident_number\":162,\"postmortem_assignee\":null,\"team_priority_object\":null,\"service\":\"260684b4-31ed-492e-ac63-0c5e1aa8a66c\",\"urgency\":1,\"creation_date\":\"2025-05-29T07:16:34.872153Z\",\"service_object\":{\"name\":\"Email from Cyber NSW (email forward)\",\"creation_date\":\"2023-11-01T00:53:33.749819Z\",\"summary\":\"\",\"description\":\"\",\"unique_id\":\"260684b4-31ed-492e-ac63-0c5e1aa8a66c\",\"auto_resolve_timeout\":0,\"created_by\":null,\"team_priority\":null,\"task_template\":null,\"acknowledgement_timeout\":0,\"acknowledgement_timeout_enabled\":false,\"status\":1,\"escalation_policy\":\"68ead823-9345-4581-b05b-c8ad3ad2eb6a\",\"team\":\"441cbebe-0017-449d-876e-a1bbacc08ea4\",\"sla\":null,\"collation_time\":0,\"collation\":0,\"under_maintenance\":false,\"team_name\":\"Cyber Security Team\"},\"has_error\":false,\"assigned_to\":\"beb77c52-124a-4c8e-830d-6\",\"snoozed_till\":null,\"error\":null,\"status\":2,\"context_window_end\":null,\"merged_with\":null,\"escalation_policy\":\"68ead823-9345-4581-b05b-c8ad3ad2eb6a\",\"title\":\"Test Incident\",\"sla_object\":null,\"assigned_to_name\":\"Luke Wilkinson\",\"snooze_time\":null,\"summary\":\"\\n\\n[Created by: Luke Wilkinson([email protected])]\",\"sla\":null,\"is_parent_incident\":false}",
  "stdout": "",
  "stderr": "",
  "start_node": ""
}

Release Notes

v1.0.1 - Introduction of Zenduty integration with 3 actions: List Incidents, Create Incident and Update Incident.