List Incidents

GET /api/incidents

Retrieves all incidents for the current user. Returns incidents in reverse chronological order (most recent first), excluding merged incidents.

Authentication

Requires user authentication via cookies or headers. The user_id is extracted from the request.

Query Parameters

This endpoint does not accept query parameters. Results are limited to 100 incidents.

Response

Returns an object containing an array of incident objects.

incidents

array

Array of incident objects

Show Incident Object

string

required

UUID of the incident

sourceType

string

required

Source of the alert (e.g., “grafana”, “datadog”, “netdata”, “pagerduty”, “splunk”, “jenkins”, “cloudbees”, “dynatrace”)

sourceAlertId

string

required

ID of the alert in the source system

status

string

required

Current status of the incident. Possible values: investigating, analyzed, merged, resolved

severity

string

Severity level of the incident (e.g., “critical”, “warning”, “info”)

alert

object

required

Alert information

Show Alert Object

title

string

required

Title of the alert

service

string

required

Service affected by the alert

source

string

required

Source system for the alert

sourceUrl

string

URL to view the alert in the source system

metadata

object

Additional metadata about the alert (JSONB)

auroraStatus

string

required

Status of Aurora’s RCA analysis. Possible values: idle, running, complete, error

summary

string

Aurora’s summary of the incident investigation

chatSessionId

string

ID of the chat session for RCA investigation (UUID)

activeTab

string

Currently active tab in the UI. Possible values: thoughts, chat

correlatedAlertCount

integer

Number of alerts correlated to this incident

affectedServices

array

List of services affected by correlated alerts

mergedIntoIncidentId

string

If this incident was merged, the UUID of the target incident

mergedIntoTitle

string

Title of the incident this was merged into

startedAt

string

required

ISO 8601 timestamp when the incident started

analyzedAt

string

ISO 8601 timestamp when the incident was analyzed

createdAt

string

required

ISO 8601 timestamp when the incident record was created

updatedAt

string

required

ISO 8601 timestamp when the incident was last updated

Example Request

cURL

curl -X GET "https://api.aurora.example.com/api/incidents" \
  -H "Cookie: session_token=YOUR_SESSION_TOKEN"

Example Response

{
  "incidents": [
    {
      "id": "123e4567-e89b-12d3-a456-426614174000",
      "sourceType": "grafana",
      "sourceAlertId": "12345",
      "status": "investigating",
      "severity": "critical",
      "alert": {
        "title": "High CPU usage on web-server-01",
        "service": "web-server",
        "source": "grafana",
        "sourceUrl": "https://grafana.com/alerting/12345",
        "metadata": {
          "threshold": "80%",
          "currentValue": "95%"
        }
      },
      "auroraStatus": "running",
      "summary": "Investigating high CPU usage...",
      "chatSessionId": "abc123-session-id",
      "activeTab": "thoughts",
      "correlatedAlertCount": 3,
      "affectedServices": ["web-server", "api-gateway"],
      "startedAt": "2024-03-03T10:30:00Z",
      "analyzedAt": null,
      "createdAt": "2024-03-03T10:30:05Z",
      "updatedAt": "2024-03-03T10:45:00Z"
    }
  ]
}

Response Codes

200

Success

Successfully retrieved incidents

400

Bad Request

Missing user_id (authentication failed)

500

Internal Server Error

Failed to retrieve incidents

Notes

Results are limited to 100 most recent incidents
Incidents with status merged are excluded from results
Results are ordered by started_at in descending order (most recent first)
Requires Row Level Security (RLS) context to be set with the user’s ID

Authentication

Incidents

Chat Sessions

Connectors

Health & Monitoring

List Incidents

GET /api/incidents

Authentication

Query Parameters

Response

Example Request

Example Response

Response Codes

Notes

Build docs developers (and LLMs) love

Authentication

Incidents

Chat Sessions

Connectors

Health & Monitoring

​GET /api/incidents

​Authentication

​Query Parameters

​Response

​Example Request

​Example Response

​Response Codes

​Notes

Build docs developers (and LLMs) love

GET /api/incidents

Authentication

Query Parameters

Response

Example Request

Example Response

Response Codes

Notes