Audit logs

To give you visibility over the changes that are made within your incident.io account, we use an audit log. Our audit log is powered by WorkOS. The log is available for customers on our Enterprise plan.

The audit log contains information about any configuration changes, as well as changes to a user's permissions (e.g. being given a new role, or access to a private incident).

Each entry will have an actor (the person or system that made the change) and one or more targets (a thing that was modified by this change). It will also include the Location and User Agent of the actor, where applicable.

Each entry will conform to a schema, which is documented here. Each entry also has a version, so that if our schema changes over time you’ll still be able to parse old events.

We’ll retain these entries for one year.

Audit log entries start from 18 April, 2023 (there are no entries available from before that date).

Viewing your audit log

You can view your audit log via our security settings page.

From there, you'll be able to:

  • View the entries via a web interface (filterable by target, event type, actor and date)
  • Export the entries for a given time period to a CSV
  • Set up a log stream to a provider of your choice (e.g. Splunk or an Amazon S3 bucket)

Understanding actors

Each entry will have an actor associated with it, which is one of 6 types:

Users

This is for changes triggered by the actions of a particular user in your account.

As an example:

"actor": {
    "type": "user",
    "id": "01G0J1EXE7AXZ2C93K61WBPYEH",
    "name": "Kelsey Mills",
    "metadata": {
      "user_base_role_slug": "admin",
      "user_custom_role_slugs": "engineering,security"
    }
  }

API Keys

This is for changes triggered by an API key.

As an example:

"actor": {
    "type": "api_key",
    "id": "01G0J1EXE7AXZ2C93K61WBPYEH",
    "name": "Lisa's development key",
    "metadata": {
      "api_key_roles": "incident_creator,global_access"
    }
  }

Integrations

This is for changes triggered by a system. Sometimes that will be a third party system (e.g. a user might be created via Slack) or sometimes it might be something triggered from inside incident.io (e.g. a severity created as part of setup).

As an example:

"actor": {
    "type": "system",
    "id": "incident_setup",
    "name": "incident.io (setup)",
    "metadata": {}
  }

Workflows

This is for changes triggered by a workflow: for example, a workflow that invites users to a private incident.

As an example:

"actor": {
    "type": "workflow",
    "id": "01G0J1EXE7AXZ2C93K61WBPYEH",
    "name": "Auto-invite security team to private incidents",
    "metadata": {}
  }

External resources

This is for changes triggered by a specific external resource (also known as an attachment).

As an example:

"actor": {
    "type": "external_resource",
    "id": "01G0J1EXE7AXZ2C93K61WBPYEH",
    "name": "#1234 Increased API latency",
    "metadata": {
      "external_resource_type": "pager_duty_incident",
      "external_resource_external_id": "q1234"
    }
  }

Alerts

This is for changes triggered by a specific alert (e.g. from Datadog or Grafana).

As an example:

"actor": {
    "type": "alert",
    "id": "01G0J1EXE7AXZ2C93K61WBPYEH",
    "name": "Staging: pod CPU high",
    "metadata": {
      "alert_source_id": "01HB0ZG3B0HM04RCXNSPV1EDYG"
    }
  }

AlertRouteCreatedV1Webhook

This entry is created whenever an alert route is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "alert_route.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

AlertRouteDeletedV1Webhook

This entry is created whenever an alert route is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "alert_route.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

AlertRouteUpdatedV1Webhook

This entry is created whenever an alert route is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "alert_route.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

AlertSchemaUpdatedV1Webhook

This entry is created whenever alert attributes are updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "alert_schema.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

AlertSourceConfigCreatedV1Webhook

This entry is created whenever an alert source is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "alert_source_config.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

AlertSourceConfigDeletedV1Webhook

This entry is created whenever an alert source is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "alert_source_config.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

AlertSourceConfigUpdatedV1Webhook

This entry is created whenever an alert source is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "alert_source_config.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

AnnouncementRuleCreatedV1Webhook

This entry is created whenever a announcement rule is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "announcement_rule.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

AnnouncementRuleDeletedV1Webhook

This entry is created whenever a announcement rule is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "announcement_rule.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

AnnouncementRuleUpdatedV1Webhook

This entry is created whenever a announcement rule is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "announcement_rule.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

ApiKeyCreatedV1Webhook

This entry is created whenever a api key is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "api_key.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

ApiKeyDeletedV1Webhook

This entry is created whenever a api key is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "api_key.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

CatalogTypeCreatedV1Webhook

This entry is created whenever a catalog type is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "catalog_type.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

CatalogTypeDeletedV1Webhook

This entry is created whenever a catalog type is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "catalog_type.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

CatalogTypeUpdatedV1Webhook

This entry is created whenever a catalog type is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "catalog_type.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

CustomFieldCreatedV1Webhook

This entry is created whenever a custom field is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "custom_field.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

CustomFieldDeletedV1Webhook

This entry is created whenever a custom field is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "custom_field.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

CustomFieldUpdatedV1Webhook

This entry is created whenever a custom field is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "custom_field.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

DebriefInviteRuleCreatedV1Webhook

This entry is created whenever a debrief invite rule is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "debrief_invite_rule.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

DebriefInviteRuleDeletedV1Webhook

This entry is created whenever a debrief invite rule is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "debrief_invite_rule.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

DebriefInviteRuleUpdatedV1Webhook

This entry is created whenever a debrief invite rule is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "debrief_invite_rule.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

EscalationPathCreatedV1Webhook

This entry is created whenever an escalation path is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "escalation_path.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

EscalationPathDeletedV1Webhook

This entry is created whenever an escalation path is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "escalation_path.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

EscalationPathUpdatedV1Webhook

This entry is created whenever an escalation path is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "escalation_path.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

FollowUpPriorityCreatedV1Webhook

This entry is created whenever a follow up priority is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "follow_up_priority.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

FollowUpPriorityDeletedV1Webhook

This entry is created whenever a follow up priority is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "follow_up_priority.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

FollowUpPriorityUpdatedV1Webhook

This entry is created whenever a follow up priority is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "follow_up_priority.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

HolidayUserFeedCreatedV1Webhook

This entry is created whenever a holiday user feed is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "holiday_user_feed.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

HolidayUserFeedDeletedV1Webhook

This entry is created whenever a holiday user feed is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "holiday_user_feed.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

HolidayUserFeedUpdatedV1Webhook

This entry is created whenever a holiday user feed is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "holiday_user_feed.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

IncidentCallSettingUpdatedV1Webhook

This entry is created whenever an organisation's incident call settings are updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "incident_call_setting.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

IncidentDurationMetricCreatedV1Webhook

This entry is created whenever a incident duration metric is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "incident_duration_metric.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

IncidentDurationMetricDeletedV1Webhook

This entry is created whenever a incident duration metric is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "incident_duration_metric.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

IncidentDurationMetricUpdatedV1Webhook

This entry is created whenever a incident duration metric is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "incident_duration_metric.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

IncidentRoleCreatedV1Webhook

This entry is created whenever a incident role is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "incident_role.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

IncidentRoleDeletedV1Webhook

This entry is created whenever a incident role is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "incident_role.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

IncidentRoleUpdatedV1Webhook

This entry is created whenever a incident role is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "incident_role.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

IncidentStatusCreatedV1Webhook

This entry is created whenever a incident status is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "incident_status.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

IncidentStatusDeletedV1Webhook

This entry is created whenever a incident status is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "incident_status.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

IncidentStatusUpdatedV1Webhook

This entry is created whenever a incident status is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "incident_status.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

IncidentTimestampCreatedV1Webhook

This entry is created whenever a incident timestamp is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "incident_timestamp.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

IncidentTimestampDeletedV1Webhook

This entry is created whenever a incident timestamp is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "incident_timestamp.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

IncidentTimestampUpdatedV1Webhook

This entry is created whenever a incident timestamp is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "incident_timestamp.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

IncidentTypeCreatedV1Webhook

This entry is created whenever a incident type is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "incident_type.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

IncidentTypeDeletedV1Webhook

This entry is created whenever a incident type is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "incident_type.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

IncidentTypeUpdatedV1Webhook

This entry is created whenever a incident type is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "incident_type.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

IntegrationInstalledV1Webhook

This entry is created whenever an integration is installed

Responses
200

OK response.

Response samples
application/json
{
  • "action": "integration.installed",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

IntegrationUninstalledV1Webhook

This entry is created whenever an integration is uninstalled

Responses
200

OK response.

Response samples
application/json
{
  • "action": "integration.uninstalled",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

InternalStatusPageCreatedV1Webhook

This entry is created whenever an internal status page is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "internal_status_page.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

InternalStatusPageDeletedV1Webhook

This entry is created whenever an internal status page is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "internal_status_page.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

InternalStatusPageUpdatedV1Webhook

This entry is created whenever an internal status page has its configuration updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "internal_status_page.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

NudgeCreatedV1Webhook

This entry is created whenever a nudge is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "nudge.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

NudgeDeletedV1Webhook

This entry is created whenever a nudge is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "nudge.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

NudgeUpdatedV1Webhook

This entry is created whenever a nudge is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "nudge.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

PolicyCreatedV1Webhook

This entry is created whenever a policy is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "policy.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

PolicyDeletedV1Webhook

This entry is created whenever a policy is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "policy.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

PolicyUpdatedV1Webhook

This entry is created whenever a policy is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "policy.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

PostIncidentTaskCreatedV1Webhook

This entry is created whenever a post-incident task is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "post_incident_task.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

PostIncidentTaskDeletedV1Webhook

This entry is created whenever a post-incident task is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "post_incident_task.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

PostIncidentTaskUpdatedV1Webhook

This entry is created whenever a post-incident task is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "post_incident_task.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

PrivateIncidentAccessAttemptedV1Webhook

This entry is created whenever someone attempts to access a private incident.

Responses
200

OK response.

Response samples
application/json
{
  • "action": "private_incident.access_attempted",
  • "actor": {
    },
  • "context": {
    },
  • "metadata": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

PrivateIncidentAccessRequestedV1Webhook

This entry is created whenever someone requests access to a private incident.

Responses
200

OK response.

Response samples
application/json
{
  • "action": "private_incident.access_requested",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

PrivateIncidentMembershipGrantedV1Webhook

This entry is created whenever someone is granted access to a private incident. If they have the 'manage private incidents' permission, then it'll appear that the system has given them access to the incident.

Responses
200

OK response.

Response samples
application/json
{
  • "action": "private_incident_membership.granted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

PrivateIncidentMembershipRevokedV1Webhook

This entry is created whenever someone's access to a private incident is revoked.

Responses
200

OK response.

Response samples
application/json
{
  • "action": "private_incident_membership.revoked",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

RbacRoleCreatedV1Webhook

This entry is created whenever a rbac role is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "rbac_role.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

RbacRoleDeletedV1Webhook

This entry is created whenever a rbac role is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "rbac_role.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

RbacRoleUpdatedV1Webhook

This entry is created whenever a rbac role is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "rbac_role.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

ScheduleCreatedV1Webhook

This entry is created whenever a schedule is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "schedule.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

ScheduleDeletedV1Webhook

This entry is created whenever a schedule is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "schedule.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

ScheduleUpdatedV1Webhook

This entry is created whenever a schedule is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "schedule.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

ScimGroupRoleMappingsUpdatedV1Webhook

This entry is created whenever a SCIM group is mapped to a new RBAC role

Responses
200

OK response.

Response samples
application/json
{
  • "action": "scim_group.role_mappings_updated",
  • "actor": {
    },
  • "context": {
    },
  • "metadata": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

SeverityCreatedV1Webhook

This entry is created whenever a severity is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "severity.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

SeverityDeletedV1Webhook

This entry is created whenever a severity is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "severity.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

SeverityUpdatedV1Webhook

This entry is created whenever a severity is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "severity.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

StatusPageCreatedV1Webhook

This entry is created whenever a status page is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "status_page.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

StatusPageDeletedV1Webhook

This entry is created whenever a status page is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "status_page.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

StatusPageUpdatedV1Webhook

This entry is created whenever a status page has its configuration updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "status_page.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

StatusPageSubPageCreatedV1Webhook

This entry is created whenever a status page sub-page is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "status_page_sub_page.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

StatusPageSubPageDeletedV1Webhook

This entry is created whenever a status page sub-page is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "status_page_sub_page.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

StatusPageSubPageUpdatedV1Webhook

This entry is created whenever a status page sub-page has its configuration updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "status_page_sub_page.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

StatusPageTemplateCreatedV1Webhook

This entry is created whenever a status page template is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "status_page_template.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

StatusPageTemplateDeletedV1Webhook

This entry is created whenever a status page template is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "status_page_template.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

StatusPageTemplateUpdatedV1Webhook

This entry is created whenever a status page template is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "status_page_template.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

UserCreatedV1Webhook

This entry is created whenever a user is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "user.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

UserDeactivatedV1Webhook

This entry is created whenever a user is deactivated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "user.deactivated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

UserReinstatedV1Webhook

This entry is created when a user is reinstated after being deactivated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "user.reinstated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

UserRoleMembershipsUpdatedV1Webhook

This entry is created whenever a user's role memberships are changed.

Responses
200

OK response.

Response samples
application/json
{
  • "action": "user.role_memberships_updated",
  • "actor": {
    },
  • "context": {
    },
  • "metadata": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

UserUpdatedV1Webhook

This entry is created whenever a user is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "user.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

WorkflowCreatedV1Webhook

This entry is created whenever a workflow is created

Responses
200

OK response.

Response samples
application/json
{
  • "action": "workflow.created",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

WorkflowDeletedV1Webhook

This entry is created whenever a workflow is deleted

Responses
200

OK response.

Response samples
application/json
{
  • "action": "workflow.deleted",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}

WorkflowUpdatedV1Webhook

This entry is created whenever a workflow is updated

Responses
200

OK response.

Response samples
application/json
{
  • "action": "workflow.updated",
  • "actor": {
    },
  • "context": {
    },
  • "occurred_at": "2021-08-17T13:28:57.801578Z",
  • "targets": [
    ],
  • "version": 1
}