diff --git a/config/_default/menus/api.en.yaml b/config/_default/menus/api.en.yaml
index 7faf624002c..0762ad66753 100644
--- a/config/_default/menus/api.en.yaml
+++ b/config/_default/menus/api.en.yaml
@@ -8971,6 +8971,19 @@ menu:
unstable:
- v2
order: 6
+ - name: Import an incident
+ url: '#import-an-incident'
+ identifier: incidents-import-an-incident
+ parent: incidents
+ generated: true
+ params:
+ versions:
+ - v2
+ operationids:
+ - ImportIncident
+ unstable:
+ - v2
+ order: 49
- name: Update an incident type
url: '#update-an-incident-type'
identifier: incidents-update-an-incident-type
diff --git a/content/en/api/v2/incidents/examples.json b/content/en/api/v2/incidents/examples.json
index 73e453f5ad2..c496aa7ef71 100644
--- a/content/en/api/v2/incidents/examples.json
+++ b/content/en/api/v2/incidents/examples.json
@@ -3267,6 +3267,235 @@
"html": "
\n
\n
\n
\n
\n
Incident type data for a patch request.
\n
\n
\n
\n
\n
\n
attributes [required]
\n
\n
\n
Incident type's attributes for updates.
\n
\n
\n
\n
\n
\n
\n
Timestamp when the incident type was created.
\n
\n \n
\n
\n
\n
\n
\n
\n
A unique identifier that represents the user that created the incident type.
\n
\n \n
\n
\n
\n
\n
\n
\n
Text that describes the incident type.
\n
\n \n
\n
\n
\n
\n
\n
\n
When true, this incident type will be used as the default type when an incident type is not specified.
\n
\n \n
\n
\n
\n
\n
\n
\n
A unique identifier that represents the user that last modified the incident type.
\n
\n \n
\n
\n
\n
\n
\n
\n
Timestamp when the incident type was last modified.
\n
\n \n
\n
\n
\n
\n
\n
\n
The name of the incident type.
\n
\n \n
\n
\n
\n
\n
\n
\n
The string that will be prepended to the incident title across the Datadog app.
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
Incident type resource type. \nAllowed enum values: incident_types
default: incident_types
\n
\n \n
\n
\n
\n
"
}
},
+ "ImportIncident": {
+ "responses": {
+ "201": {
+ "json": {
+ "data": {
+ "attributes": {
+ "archived": "2019-09-19T10:00:00.000Z",
+ "case_id": "integer",
+ "created": "2025-01-01T00:00:00Z",
+ "created_by_uuid": "string",
+ "creation_idempotency_key": "string",
+ "customer_impact_end": "2019-09-19T10:00:00.000Z",
+ "customer_impact_scope": "An example customer impact scope",
+ "customer_impact_start": "2019-09-19T10:00:00.000Z",
+ "declared": "2025-01-01T00:00:00Z",
+ "declared_by_uuid": "string",
+ "detected": "2025-01-01T00:00:00Z",
+ "fields": {
+ "": "undefined"
+ },
+ "incident_type_uuid": "00000000-0000-0000-0000-000000000000",
+ "is_test": false,
+ "last_modified_by_uuid": "string",
+ "modified": "2019-09-19T10:00:00.000Z",
+ "non_datadog_creator": {
+ "image_48_px": "string",
+ "name": "string"
+ },
+ "notification_handles": [
+ {
+ "display_name": "Jane Doe",
+ "handle": "@test.user@test.com"
+ }
+ ],
+ "public_id": 1,
+ "resolved": "2019-09-19T10:00:00.000Z",
+ "severity": "UNKNOWN",
+ "state": "string",
+ "title": "A test incident title",
+ "visibility": "string"
+ },
+ "id": "00000000-0000-0000-1234-000000000000",
+ "relationships": {
+ "attachments": {
+ "data": [
+ {
+ "id": "00000000-0000-abcd-1000-000000000000",
+ "type": "incident_attachments"
+ }
+ ]
+ },
+ "commander_user": {
+ "data": {
+ "id": "00000000-0000-0000-0000-000000000000",
+ "type": "users"
+ }
+ },
+ "created_by_user": {
+ "data": {
+ "id": "00000000-0000-0000-2345-000000000000",
+ "type": "users"
+ }
+ },
+ "declared_by_user": {
+ "data": {
+ "id": "00000000-0000-0000-2345-000000000000",
+ "type": "users"
+ }
+ },
+ "impacts": {
+ "data": [
+ {
+ "id": "00000000-0000-0000-2345-000000000000",
+ "type": "incident_impacts"
+ }
+ ]
+ },
+ "incident_type": {
+ "data": {
+ "id": "00000000-0000-0000-0000-000000000000",
+ "type": "incident_types"
+ }
+ },
+ "integrations": {
+ "data": [
+ {
+ "id": "00000000-abcd-0001-0000-000000000000",
+ "type": "incident_integrations"
+ }
+ ]
+ },
+ "last_modified_by_user": {
+ "data": {
+ "id": "00000000-0000-0000-2345-000000000000",
+ "type": "users"
+ }
+ },
+ "responders": {
+ "data": [
+ {
+ "id": "00000000-0000-0000-2345-000000000000",
+ "type": "incident_responders"
+ }
+ ]
+ },
+ "user_defined_fields": {
+ "data": [
+ {
+ "id": "00000000-0000-0000-2345-000000000000",
+ "type": "user_defined_field"
+ }
+ ]
+ }
+ },
+ "type": "incidents"
+ },
+ "included": [
+ {
+ "attributes": {
+ "email": "string",
+ "handle": "string",
+ "icon": "string",
+ "name": "string",
+ "uuid": "string"
+ },
+ "id": "string",
+ "type": "users"
+ }
+ ]
+ },
+ "html": "\n
\n
\n
\n
\n
Incident data from an import response.
\n
\n
\n
\n
\n
\n
\n
The incident's attributes from an import response.
\n
\n
\n
\n
\n
\n
\n
Timestamp of when the incident was archived.
\n
\n \n
\n
\n
\n
\n
\n
\n
Timestamp when the incident was created.
\n
\n \n
\n
\n
\n
\n
\n
\n
UUID of the user who created the incident.
\n
\n \n
\n
\n
\n
\n
\n
creation_idempotency_key
\n
\n
\n
A unique key used to ensure idempotent incident creation.
\n
\n \n
\n
\n
\n
\n
\n
\n
Timestamp when customers were no longer impacted by the incident.
\n
\n \n
\n
\n
\n
\n
\n
customer_impact_scope
\n
\n
\n
A summary of the impact customers experienced during the incident.
\n
\n \n
\n
\n
\n
\n
\n
customer_impact_start
\n
\n
\n
Timestamp when customers began being impacted by the incident.
\n
\n \n
\n
\n
\n
\n
\n
\n
Timestamp when the incident was declared.
\n
\n \n
\n
\n
\n
\n
\n
\n
UUID of the user who declared the incident.
\n
\n \n
\n
\n
\n
\n
\n
\n
Timestamp when the incident was detected.
\n
\n \n
\n
\n
\n
\n
\n
\n
A condensed view of the user-defined fields attached to incidents.
\n
\n
\n
\n
\n
\n
\n
Dynamic fields for which selections can be made, with field names as keys.
\n
\n
\n
\n
\n
\n
\n
A field with a single value selected.
\n
\n
\n
\n
\n
\n
\n
Type of the single value field definitions. \nAllowed enum values: dropdown,textbox
default: dropdown
\n
\n \n
\n
\n
\n
\n
\n
\n
The single value selected for this field.
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
A field with potentially multiple values selected.
\n
\n
\n
\n
\n
\n
\n
Type of the multiple value field definitions. \nAllowed enum values: multiselect,textarray,metrictag,autocomplete
default: multiselect
\n
\n \n
\n
\n
\n
\n
\n
\n
The multiple values selected for this field.
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
A unique identifier that represents an incident type.
\n
\n \n
\n
\n
\n
\n
\n
\n
A flag indicating whether the incident is a test incident.
\n
\n \n
\n
\n
\n
\n
\n
last_modified_by_uuid
\n
\n
\n
UUID of the user who last modified the incident.
\n
\n \n
\n
\n
\n
\n
\n
\n
Timestamp when the incident was last modified.
\n
\n \n
\n
\n
\n
\n
\n
\n
Incident's non Datadog creator.
\n
\n
\n
\n
\n
\n
\n
Non Datadog creator 48px image.
\n
\n \n
\n
\n
\n
\n
\n
\n
Non Datadog creator name.
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
notification_handles
\n
\n
\n
Notification handles that will be notified of the incident during update.
\n
\n
\n
\n
\n
\n
\n
The name of the notified handle.
\n
\n \n
\n
\n
\n
\n
\n
\n
The handle used for the notification. This includes an email address, Slack channel, or workflow.
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
The monotonically increasing integer ID for the incident.
\n
\n \n
\n
\n
\n
\n
\n
\n
Timestamp when the incident's state was last changed from active or stable to resolved or completed.
\n
\n \n
\n
\n
\n
\n
\n
\n
The incident severity. \nAllowed enum values: UNKNOWN,SEV-0,SEV-1,SEV-2,SEV-3,SEV-4,SEV-5
\n
\n \n
\n
\n
\n
\n
\n
\n
The state of the incident.
\n
\n \n
\n
\n
\n
\n
\n
\n
The title of the incident, which summarizes what happened.
\n
\n \n
\n
\n
\n
\n
\n
\n
The incident visibility status.
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
The incident's relationships from an import response.
\n
\n
\n
\n
\n
\n
\n
A relationship reference for attachments.
\n
\n
\n
\n
\n
\n
\n
An array of incident attachments.
\n
\n
\n
\n
\n
\n
\n
A unique identifier that represents the attachment.
\n
\n \n
\n
\n
\n
\n
\n
\n
The incident attachment resource type. \nAllowed enum values: incident_attachments
default: incident_attachments
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Relationship to user object.
\n
\n
\n
\n
\n
\n
\n
A unique identifier that represents the user.
\n
\n \n
\n
\n
\n
\n
\n
\n
Users resource type. \nAllowed enum values: users
default: users
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Relationship to user object.
\n
\n
\n
\n
\n
\n
\n
A unique identifier that represents the user.
\n
\n \n
\n
\n
\n
\n
\n
\n
Users resource type. \nAllowed enum values: users
default: users
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Relationship to user object.
\n
\n
\n
\n
\n
\n
\n
A unique identifier that represents the user.
\n
\n \n
\n
\n
\n
\n
\n
\n
Users resource type. \nAllowed enum values: users
default: users
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
An array of incident impacts.
\n
\n
\n
\n
\n
\n
\n
A unique identifier that represents the impact.
\n
\n \n
\n
\n
\n
\n
\n
\n
The incident impacts type. \nAllowed enum values: incident_impacts
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Relationship to an incident type.
\n
\n
\n
\n
\n
\n
\n
Relationship to incident type object.
\n
\n
\n
\n
\n
\n
\n
Incident type resource type. \nAllowed enum values: incident_types
default: incident_types
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
A relationship reference for multiple integration metadata objects.
\n
\n
\n
\n
\n
\n
\n
Integration metadata relationship array
\n
\n
\n
\n
\n
\n
\n
A unique identifier that represents the integration metadata.
\n
\n \n
\n
\n
\n
\n
\n
\n
Integration metadata resource type. \nAllowed enum values: incident_integrations
default: incident_integrations
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n
last_modified_by_user
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Relationship to user object.
\n
\n
\n
\n
\n
\n
\n
A unique identifier that represents the user.
\n
\n \n
\n
\n
\n
\n
\n
\n
Users resource type. \nAllowed enum values: users
default: users
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Relationship to incident responders.
\n
\n
\n
\n
\n
\n
\n
An array of incident responders.
\n
\n
\n
\n
\n
\n
\n
A unique identifier that represents the responder.
\n
\n \n
\n
\n
\n
\n
\n
\n
The incident responders type. \nAllowed enum values: incident_responders
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Relationship to incident user defined fields.
\n
\n
\n
\n
\n
\n
\n
An array of user defined fields.
\n
\n
\n
\n
\n
\n
\n
A unique identifier that represents the responder.
\n
\n \n
\n
\n
\n
\n
\n
\n
The incident user defined fields type. \nAllowed enum values: user_defined_field
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Incident resource type. \nAllowed enum values: incidents
default: incidents
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
Included related resources that the user requested.
\n
\n
\n
\n
\n
\n
\n
User object returned by the API.
\n
\n
\n
\n
\n
\n
\n
Attributes of user object returned by the API.
\n
\n
\n
\n
\n
\n
\n
\n
\n
Users resource type. \nAllowed enum values: users
default: users
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
Incident type response data.
\n
\n
\n
\n
\n
\n
\n
Incident type's attributes.
\n
\n
\n
\n
\n
\n
\n
Timestamp when the incident type was created.
\n
\n \n
\n
\n
\n
\n
\n
\n
A unique identifier that represents the user that created the incident type.
\n
\n \n
\n
\n
\n
\n
\n
\n
Text that describes the incident type.
\n
\n \n
\n
\n
\n
\n
\n
\n
If true, this incident type will be used as the default incident type if a type is not specified during the creation of incident resources.
\n
\n \n
\n
\n
\n
\n
\n
\n
A unique identifier that represents the user that last modified the incident type.
\n
\n \n
\n
\n
\n
\n
\n
\n
Timestamp when the incident type was last modified.
\n
\n \n
\n
\n
\n
\n
\n
\n
The name of the incident type.
\n
\n \n
\n
\n
\n
\n
\n
\n
The string that will be prepended to the incident title across the Datadog app.
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
The incident type's resource relationships.
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Relationship to user object.
\n
\n
\n
\n
\n
\n
\n
A unique identifier that represents the user.
\n
\n \n
\n
\n
\n
\n
\n
\n
Users resource type. \nAllowed enum values: users
default: users
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n
google_meet_configuration
\n
\n
\n
A reference to a Google Meet Configuration resource.
\n
\n
\n
\n
\n
\n
\n
The Google Meet configuration relationship data object.
\n
\n
\n
\n
\n
\n
\n
The unique identifier of the Google Meet configuration.
\n
\n \n
\n
\n
\n
\n
\n
\n
The type of the Google Meet configuration.
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n
last_modified_by_user
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Relationship to user object.
\n
\n
\n
\n
\n
\n
\n
A unique identifier that represents the user.
\n
\n \n
\n
\n
\n
\n
\n
\n
Users resource type. \nAllowed enum values: users
default: users
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n
microsoft_teams_configuration
\n
\n
\n
A reference to a Microsoft Teams Configuration resource.
\n
\n
\n
\n
\n
\n
\n
The Microsoft Teams configuration relationship data object.
\n
\n
\n
\n
\n
\n
\n
The unique identifier of the Microsoft Teams configuration.
\n
\n \n
\n
\n
\n
\n
\n
\n
The type of the Microsoft Teams configuration.
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
A reference to a Zoom configuration resource.
\n
\n
\n
\n
\n
\n
\n
The Zoom configuration relationship data object.
\n
\n
\n
\n
\n
\n
\n
The unique identifier of the Zoom configuration.
\n
\n \n
\n
\n
\n
\n
\n
\n
The type of the Zoom configuration.
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Incident type resource type. \nAllowed enum values: incident_types
default: incident_types
\n
\n \n
\n
\n
\n
\n
\n
"
+ },
+ "400": {
+ "json": {
+ "errors": [
+ "Bad Request"
+ ]
+ },
+ "html": ""
+ },
+ "401": {
+ "json": {
+ "errors": [
+ "Bad Request"
+ ]
+ },
+ "html": ""
+ },
+ "403": {
+ "json": {
+ "errors": [
+ "Bad Request"
+ ]
+ },
+ "html": ""
+ },
+ "404": {
+ "json": {
+ "errors": [
+ "Bad Request"
+ ]
+ },
+ "html": ""
+ },
+ "429": {
+ "json": {
+ "errors": [
+ "Bad Request"
+ ]
+ },
+ "html": ""
+ }
+ },
+ "request": {
+ "json_curl": {
+ "data": {
+ "attributes": {
+ "title": "Imported incident from external system"
+ },
+ "relationships": {
+ "commander_user": {
+ "data": {
+ "id": "00000000-0000-0000-0000-000000000000",
+ "type": "users"
+ }
+ },
+ "declared_by_user": {
+ "data": {
+ "id": "00000000-0000-0000-0000-000000000000",
+ "type": "users"
+ }
+ }
+ },
+ "type": "incidents"
+ }
+ },
+ "json": {
+ "data": {
+ "attributes": {
+ "declared": "2025-01-01T00:00:00Z",
+ "detected": "2025-01-01T00:00:00Z",
+ "fields": {
+ "": "undefined"
+ },
+ "incident_type_uuid": "00000000-0000-0000-0000-000000000000",
+ "resolved": "2025-01-01T01:00:00Z",
+ "title": "Imported incident from external system",
+ "visibility": "organization"
+ },
+ "relationships": {
+ "commander_user": {
+ "data": {
+ "id": "00000000-0000-0000-0000-000000000000",
+ "type": "users"
+ }
+ },
+ "declared_by_user": {
+ "data": {
+ "id": "00000000-0000-0000-0000-000000000000",
+ "type": "users"
+ }
+ }
+ },
+ "type": "incidents"
+ }
+ },
+ "html": "\n
\n
\n
\n
\n
Incident data for an import request.
\n
\n
\n
\n
\n
\n
attributes [required]
\n
\n
\n
The incident's attributes for an import request.
\n
\n
\n
\n
\n
\n
\n
Timestamp when the incident was declared.
\n
\n \n
\n
\n
\n
\n
\n
\n
Timestamp when the incident was detected.
\n
\n \n
\n
\n
\n
\n
\n
\n
A condensed view of the user-defined fields for which to create initial selections.
\n
\n
\n
\n
\n
\n
\n
Dynamic fields for which selections can be made, with field names as keys.
\n
\n
\n
\n
\n
\n
\n
A field with a single value selected.
\n
\n
\n
\n
\n
\n
\n
The single value selected for this field.
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
A field with potentially multiple values selected.
\n
\n
\n
\n
\n
\n
\n
The multiple values selected for this field.
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
A unique identifier that represents the incident type. If not provided, the default incident type will be used.
\n
\n \n
\n
\n
\n
\n
\n
\n
Timestamp when the incident was resolved. Can only be set when the state field is set to 'resolved'.
\n
\n \n
\n
\n
\n
\n
\n
\n
The title of the incident, which summarizes what happened.
\n
\n \n
\n
\n
\n
\n
\n
\n
The visibility of the incident. \nAllowed enum values: organization,private
default: organization
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
The relationships for an incident import request.
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Relationship to user object.
\n
\n
\n
\n
\n
\n
\n
A unique identifier that represents the user.
\n
\n \n
\n
\n
\n
\n
\n
\n
Users resource type. \nAllowed enum values: users
default: users
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Relationship to user object.
\n
\n
\n
\n
\n
\n
\n
A unique identifier that represents the user.
\n
\n \n
\n
\n
\n
\n
\n
\n
Users resource type. \nAllowed enum values: users
default: users
\n
\n \n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Incident resource type. \nAllowed enum values: incidents
default: incidents
\n
\n \n
\n
\n
\n
"
+ }
+ },
"SearchIncidents": {
"responses": {
"200": {
diff --git a/content/en/api/v2/incidents/request.ImportIncident.json b/content/en/api/v2/incidents/request.ImportIncident.json
new file mode 100644
index 00000000000..81de3d81eed
--- /dev/null
+++ b/content/en/api/v2/incidents/request.ImportIncident.json
@@ -0,0 +1,19 @@
+{
+ "data": {
+ "type": "incidents",
+ "attributes": {
+ "declared": "2025-01-01T00:00:00Z",
+ "detected": "2025-01-01T00:00:00Z",
+ "fields": {
+ "severity": {
+ "value": "SEV-5"
+ },
+ "state": {
+ "value": "active"
+ }
+ },
+ "title": "Example-Incident",
+ "visibility": "organization"
+ }
+ }
+}
\ No newline at end of file
diff --git a/data/api/v2/CodeExamples.json b/data/api/v2/CodeExamples.json
index 8d60864a4d9..bf8675b6907 100644
--- a/data/api/v2/CodeExamples.json
+++ b/data/api/v2/CodeExamples.json
@@ -859,6 +859,13 @@
"description": "Create incident notification template returns \"Created\" response"
}
],
+ "ImportIncident": [
+ {
+ "group": "incidents",
+ "suffix": "",
+ "description": "Import an incident returns \"CREATED\" response"
+ }
+ ],
"UpdateIncidentIntegration": [
{
"group": "incidents",
diff --git a/data/api/v2/full_spec.yaml b/data/api/v2/full_spec.yaml
index 09f774fd773..7c7f9aeab17 100644
--- a/data/api/v2/full_spec.yaml
+++ b/data/api/v2/full_spec.yaml
@@ -518,6 +518,17 @@ components:
items:
$ref: '#/components/schemas/IncidentImpactRelatedObject'
type: array
+ IncidentImportIncludeQueryParameter:
+ description: Specifies which types of related objects should be included in
+ the response when importing an incident.
+ explode: false
+ in: query
+ name: include
+ required: false
+ schema:
+ items:
+ $ref: '#/components/schemas/IncidentImportRelatedObject'
+ type: array
IncidentIncludeQueryParameter:
description: Specifies which types of related objects should be included in
the response.
@@ -28773,6 +28784,319 @@ components:
type: string
x-enum-varnames:
- INCIDENT_IMPACTS
+ IncidentImportFieldAttributes:
+ description: Dynamic fields for which selections can be made, with field names
+ as keys.
+ oneOf:
+ - $ref: '#/components/schemas/IncidentImportFieldAttributesSingleValue'
+ - $ref: '#/components/schemas/IncidentImportFieldAttributesMultipleValue'
+ IncidentImportFieldAttributesMultipleValue:
+ description: A field with potentially multiple values selected.
+ properties:
+ value:
+ description: The multiple values selected for this field.
+ example:
+ - '1.0'
+ - '1.1'
+ items:
+ description: A value which has been selected for the parent field.
+ example: '1.1'
+ type: string
+ nullable: true
+ type: array
+ type: object
+ IncidentImportFieldAttributesSingleValue:
+ description: A field with a single value selected.
+ properties:
+ value:
+ description: The single value selected for this field.
+ example: SEV-1
+ nullable: true
+ type: string
+ type: object
+ IncidentImportRelatedObject:
+ description: Object related to an incident that can be included in the response.
+ enum:
+ - last_modified_by_user
+ - created_by_user
+ - commander_user
+ - declared_by_user
+ - incident_type
+ type: string
+ x-enum-varnames:
+ - LAST_MODIFIED_BY_USER
+ - CREATED_BY_USER
+ - COMMANDER_USER
+ - DECLARED_BY_USER
+ - INCIDENT_TYPE
+ IncidentImportRelationships:
+ description: The relationships for an incident import request.
+ properties:
+ commander_user:
+ $ref: '#/components/schemas/NullableRelationshipToUser'
+ declared_by_user:
+ $ref: '#/components/schemas/NullableRelationshipToUser'
+ type: object
+ IncidentImportRequest:
+ description: Import request for an incident. Used to import historical incidents
+ from external systems.
+ properties:
+ data:
+ $ref: '#/components/schemas/IncidentImportRequestData'
+ required:
+ - data
+ type: object
+ IncidentImportRequestAttributes:
+ description: The incident's attributes for an import request.
+ properties:
+ declared:
+ description: Timestamp when the incident was declared.
+ example: '2025-01-01T00:00:00Z'
+ format: date-time
+ type: string
+ detected:
+ description: Timestamp when the incident was detected.
+ example: '2025-01-01T00:00:00Z'
+ format: date-time
+ type: string
+ fields:
+ additionalProperties:
+ $ref: '#/components/schemas/IncidentImportFieldAttributes'
+ description: A condensed view of the user-defined fields for which to create
+ initial selections.
+ example:
+ severity:
+ value: SEV-5
+ state:
+ value: active
+ type: object
+ incident_type_uuid:
+ description: A unique identifier that represents the incident type. If not
+ provided, the default incident type will be used.
+ example: 00000000-0000-0000-0000-000000000000
+ type: string
+ resolved:
+ description: Timestamp when the incident was resolved. Can only be set when
+ the state field is set to 'resolved'.
+ example: '2025-01-01T01:00:00Z'
+ format: date-time
+ type: string
+ title:
+ description: The title of the incident, which summarizes what happened.
+ example: Imported incident from external system
+ maxLength: 1024
+ type: string
+ visibility:
+ $ref: '#/components/schemas/IncidentImportVisibility'
+ required:
+ - title
+ type: object
+ IncidentImportRequestData:
+ description: Incident data for an import request.
+ properties:
+ attributes:
+ $ref: '#/components/schemas/IncidentImportRequestAttributes'
+ relationships:
+ $ref: '#/components/schemas/IncidentImportRelationships'
+ type:
+ $ref: '#/components/schemas/IncidentType'
+ required:
+ - type
+ - attributes
+ type: object
+ IncidentImportResponse:
+ description: Response with an incident.
+ properties:
+ data:
+ $ref: '#/components/schemas/IncidentImportResponseData'
+ included:
+ description: Included related resources that the user requested.
+ items:
+ $ref: '#/components/schemas/IncidentImportResponseIncludedItem'
+ readOnly: true
+ type: array
+ required:
+ - data
+ type: object
+ IncidentImportResponseAttributes:
+ description: The incident's attributes from an import response.
+ properties:
+ archived:
+ description: Timestamp of when the incident was archived.
+ format: date-time
+ nullable: true
+ readOnly: true
+ type: string
+ case_id:
+ description: The incident case id.
+ format: int64
+ nullable: true
+ type: integer
+ created:
+ description: Timestamp when the incident was created.
+ example: '2025-01-01T00:00:00Z'
+ format: date-time
+ readOnly: true
+ type: string
+ created_by_uuid:
+ description: UUID of the user who created the incident.
+ nullable: true
+ type: string
+ creation_idempotency_key:
+ description: A unique key used to ensure idempotent incident creation.
+ nullable: true
+ type: string
+ customer_impact_end:
+ description: Timestamp when customers were no longer impacted by the incident.
+ format: date-time
+ nullable: true
+ type: string
+ customer_impact_scope:
+ description: A summary of the impact customers experienced during the incident.
+ example: An example customer impact scope
+ nullable: true
+ type: string
+ customer_impact_start:
+ description: Timestamp when customers began being impacted by the incident.
+ format: date-time
+ nullable: true
+ type: string
+ declared:
+ description: Timestamp when the incident was declared.
+ example: '2025-01-01T00:00:00Z'
+ format: date-time
+ nullable: true
+ type: string
+ declared_by_uuid:
+ description: UUID of the user who declared the incident.
+ nullable: true
+ type: string
+ detected:
+ description: Timestamp when the incident was detected.
+ example: '2025-01-01T00:00:00Z'
+ format: date-time
+ nullable: true
+ type: string
+ fields:
+ additionalProperties:
+ $ref: '#/components/schemas/IncidentFieldAttributes'
+ description: A condensed view of the user-defined fields attached to incidents.
+ example:
+ severity:
+ type: dropdown
+ value: SEV-5
+ type: object
+ incident_type_uuid:
+ description: A unique identifier that represents an incident type.
+ example: 00000000-0000-0000-0000-000000000000
+ type: string
+ is_test:
+ description: A flag indicating whether the incident is a test incident.
+ example: false
+ type: boolean
+ last_modified_by_uuid:
+ description: UUID of the user who last modified the incident.
+ nullable: true
+ type: string
+ modified:
+ description: Timestamp when the incident was last modified.
+ format: date-time
+ readOnly: true
+ type: string
+ non_datadog_creator:
+ $ref: '#/components/schemas/IncidentNonDatadogCreator'
+ notification_handles:
+ description: Notification handles that will be notified of the incident
+ during update.
+ items:
+ $ref: '#/components/schemas/IncidentNotificationHandle'
+ nullable: true
+ type: array
+ public_id:
+ description: The monotonically increasing integer ID for the incident.
+ example: 1
+ format: int64
+ type: integer
+ resolved:
+ description: Timestamp when the incident's state was last changed from active
+ or stable to resolved or completed.
+ format: date-time
+ nullable: true
+ type: string
+ severity:
+ $ref: '#/components/schemas/IncidentSeverity'
+ state:
+ description: The state of the incident.
+ nullable: true
+ type: string
+ title:
+ description: The title of the incident, which summarizes what happened.
+ example: A test incident title
+ type: string
+ visibility:
+ description: The incident visibility status.
+ nullable: true
+ type: string
+ required:
+ - title
+ type: object
+ IncidentImportResponseData:
+ description: Incident data from an import response.
+ properties:
+ attributes:
+ $ref: '#/components/schemas/IncidentImportResponseAttributes'
+ id:
+ description: The incident's ID.
+ example: 00000000-0000-0000-1234-000000000000
+ type: string
+ relationships:
+ $ref: '#/components/schemas/IncidentImportResponseRelationships'
+ type:
+ $ref: '#/components/schemas/IncidentType'
+ required:
+ - id
+ - type
+ type: object
+ IncidentImportResponseIncludedItem:
+ description: An object related to an incident that is included in the response.
+ oneOf:
+ - $ref: '#/components/schemas/IncidentUserData'
+ - $ref: '#/components/schemas/IncidentTypeObject'
+ IncidentImportResponseRelationships:
+ description: The incident's relationships from an import response.
+ properties:
+ attachments:
+ $ref: '#/components/schemas/RelationshipToIncidentAttachment'
+ commander_user:
+ $ref: '#/components/schemas/NullableRelationshipToUser'
+ created_by_user:
+ $ref: '#/components/schemas/RelationshipToUser'
+ declared_by_user:
+ $ref: '#/components/schemas/RelationshipToUser'
+ impacts:
+ $ref: '#/components/schemas/RelationshipToIncidentImpacts'
+ incident_type:
+ $ref: '#/components/schemas/RelationshipToIncidentType'
+ integrations:
+ $ref: '#/components/schemas/RelationshipToIncidentIntegrationMetadatas'
+ last_modified_by_user:
+ $ref: '#/components/schemas/RelationshipToUser'
+ responders:
+ $ref: '#/components/schemas/RelationshipToIncidentResponders'
+ user_defined_fields:
+ $ref: '#/components/schemas/RelationshipToIncidentUserDefinedFields'
+ type: object
+ IncidentImportVisibility:
+ default: organization
+ description: The visibility of the incident.
+ enum:
+ - organization
+ - private
+ example: organization
+ type: string
+ x-enum-varnames:
+ - ORGANIZATION
+ - PRIVATE
IncidentIntegrationMetadataAttributes:
description: Incident integration metadata's attributes for a create request.
properties:
@@ -79700,6 +80024,59 @@ paths:
- incident_settings_write
x-unstable: '**Note**: This endpoint is in public beta.
+ If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
+ /api/v2/incidents/import:
+ post:
+ description: 'Import an incident from an external system. This endpoint allows
+ you to create incidents with
+
+ historical data such as custom timestamps for detection, declaration, and
+ resolution.
+
+ Imported incidents will not execute integrations or notification rules.'
+ operationId: ImportIncident
+ parameters:
+ - $ref: '#/components/parameters/IncidentImportIncludeQueryParameter'
+ requestBody:
+ content:
+ application/json:
+ schema:
+ $ref: '#/components/schemas/IncidentImportRequest'
+ description: Incident import payload.
+ required: true
+ responses:
+ '201':
+ content:
+ application/json:
+ schema:
+ $ref: '#/components/schemas/IncidentImportResponse'
+ description: CREATED
+ '400':
+ $ref: '#/components/responses/BadRequestResponse'
+ '401':
+ $ref: '#/components/responses/UnauthorizedResponse'
+ '403':
+ $ref: '#/components/responses/ForbiddenResponse'
+ '404':
+ $ref: '#/components/responses/NotFoundResponse'
+ '429':
+ $ref: '#/components/responses/TooManyRequestsResponse'
+ security:
+ - apiKeyAuth: []
+ appKeyAuth: []
+ - AuthZ:
+ - incident_write
+ summary: Import an incident
+ tags:
+ - Incidents
+ x-codegen-request-body-name: body
+ x-menu-order: 49
+ x-permission:
+ operator: AND
+ permissions:
+ - incident_write
+ x-unstable: '**Note**: This endpoint is in public beta.
+
If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
/api/v2/incidents/search:
get:
diff --git a/data/api/v2/translate_actions.json b/data/api/v2/translate_actions.json
index b003496521c..0cd95d3b60d 100644
--- a/data/api/v2/translate_actions.json
+++ b/data/api/v2/translate_actions.json
@@ -1314,6 +1314,12 @@
"request_description": "Incident type payload.",
"request_schema_description": "Patch request for an incident type."
},
+ "ImportIncident": {
+ "description": "Import an incident from an external system. This endpoint allows you to create incidents with\nhistorical data such as custom timestamps for detection, declaration, and resolution.\nImported incidents will not execute integrations or notification rules.",
+ "summary": "Import an incident",
+ "request_description": "Incident import payload.",
+ "request_schema_description": "Import request for an incident. Used to import historical incidents from external systems."
+ },
"SearchIncidents": {
"description": "Search for incidents matching a certain query.",
"summary": "Search for incidents"