Skip to main content
Opens an incident for a rule without evaluating the condition. Use the call to exercise notifications and escalation, or to raise an incident by hand. The call works for disabled rules. It requires alerts.manage, and the body is empty.
  • When the rule already has an open or acknowledged incident, the call returns that incident unchanged. Repeating the call is safe.
  • Otherwise, the call creates an incident with the status open and sends the triggered notification event.
  • The severity is the rule severity, then a severity label, then warning. The call ignores thresholds.
  • The annotation manual_triggered_by holds the identifier of the calling user, and triggering_query.sample_values is empty.
An enabled rule resolves the incident at the next evaluation when its condition does not match. A disabled rule keeps the incident open until a user resolves it.
The response is an incident. List incidents describes every field. Errors
Last modified on October 9, 2026