> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List Incidents

List and query incidents.

<Note>
  External Documentation

  To learn more, visit the [Splunk Observability documentation](https://dev.splunk.com/observability/reference/api/incidents/latest#endpoint-retrieve-incidents).
</Note>

## Basic Parameters

<div className="integrations-table">
  | Parameter        | Description                                                                                                                                   |
  | ---------------- | --------------------------------------------------------------------------------------------------------------------------------------------- |
  | Include Resolved | Controls which incidents to retrieve, based on their status.                                                                                  |
  | Query            | Controls which incidents to retrieve, based on the team linked to the dectectors that created the incidents. For Example: teamId:FO1Vq3ABXYZ. |
</div>

## Advanced Parameters

<div className="integrations-table">
  | Parameter | Description                                                                                 |
  | --------- | ------------------------------------------------------------------------------------------- |
  | Limit     | The number of results to return from the result set.                                        |
  | Offset    | The result object in the result set at which the API should start returning results to you. |
</div>

## Example Output

```json theme={"dark"}
[
	{
		"active": false,
		"anomalyState": "ANOMALOUS",
		"detectLabel": "string",
		"detectorId": "string",
		"duration": 0,
		"events": [
			{
				"anomalyState": "ANOMALOUS",
				"detectLabel": "string",
				"detectorId": "string",
				"detectorName": "x",
				"event_annotations": {
					"<property name>": "any"
				},
				"id": "string",
				"incidentId": "string",
				"inputs": [
					{
						"dimensions": {
							"<property name>": "any"
						},
						"fragment": "string",
						"value": 0
					}
				],
				"severity": "Critical",
				"timestamp": 1557484230000
			}
		],
		"incidentId": "string",
		"linkedTeams": [
			"AbcdEf1ABCD",
			"FO1Vq3ABXYZ"
		],
		"severity": "Critical"
	}
]
```

## Workflow Library Example

[List Incidents with Splunk Observability and Send Results Via Email](https://library.blinkops.com/workflows/list-incidents-with-splunk-observability-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/list-incidents-with-splunk-observability-and-send-results-via-email/canvas" />
</div>