ZRM Docs
API ReferenceIncident

incident.create

Type: Mutation · Auth: Workspace-aware

Input

FieldTypeRequiredDefaultDescription
siteIdstringYesID of the associated site
systemIdstringNoID of the associated system
incidentTypeenum(access_event, asset_failure, breach_attempt, system_error, health_check_failed, unauthorized_activity, physical_tampering, connectivity_loss, other)YesIncident type
priorityenum(low, medium, high, critical)Yes"medium"Priority
statusenum(new, investigating, assigned, in_progress, resolved, closed, false_alarm)Yes"new"Status
escalationStatusenum(not_escalated, escalated_to_team, escalated_to_manager, critical_escalation)Yes"not_escalated"Escalation status
assignedUserIdstringNoID of the associated assigned user
titlestringYesTitle
rootCauseSummarystringNoRoot cause summary
resolutionSummarystringNoResolution summary
linkedTicketIdstringNoID of the associated linked ticket
workspaceIdstringNoID of the associated workspace
visibilityModeenum(global, workspace_local, shared)Yes"workspace_local"Visibility mode

Example

{
  "siteId": "550e8400-e29b-41d4-a716-446655440000",
  "systemId": "550e8400-e29b-41d4-a716-446655440000",
  "incidentType": "access_event",
  "priority": "low",
  "status": "new",
  "escalationStatus": "not_escalated",
  "title": "Example Title",
  "visibilityMode": "global"
}

On this page