NRQL queries to find only open incidents now

[arijit.chowdhury]

Hello Team,

How to do join or filter with the output of other queries in NRQL,
I would like to build a query which will give me the current open incident list.

[hross]

Hi there @arijit.chowdhury -

I took a look at this for you and I don’t think there is a straighforward way to do this, per this thread:

NRQL query to get all open incidents by alert policy

I want an NRQL query that will list down all open incidents (which are not yet close) FACET by the alert policy.

Let me know if you have more questions after reviewing that thread, or if I misunderstood what you are trying to do!

[philweber]

Hi, @arijit.chowdhury: You may find this post helpful:

Getting currently open incidents with NRQL

Customers often ask how to use NRQL to get a list of incidents (formerly violations) that are currently open. Unfortunately, this is not straightforward: New Relic records incidents as NrAiIncident events, but because NRDB is a “write-once” data store, it is not possible to update the state of an incident from open to closed. Instead, you end up with separate open and close events for each incident; I have not figured out how to write an NRQL query that returns all incidents for which there is a…