ktm incidents counter
Use the ktm incidents counter command to quickly retrieve critical, warning, and closed incident counts for any operator.
Get incident counts: critical, warning, closed
Usage
ktm incidents counter [flags]
Examples
# Get incident counts for an operator
ktm incidents counter --operator my-operator
# Get counts for a specific alert
ktm incidents counter --operator my-operator --alert-id 42
# Get counts for the last 7 days
ktm incidents counter --operator my-operator --created-after 2026-03-12T00:00:00Z
Flags
| Flag | Type | Default | Description |
|---|---|---|---|
--alert-id | string | Comma-separated alert definition IDs | |
--closed-after | string | Filter incidents closed after this ISO datetime | |
--closed-before | string | Filter incidents closed before this ISO datetime | |
--created-after | string | Filter incidents created after this ISO datetime | |
--created-before | string | Filter incidents created before this ISO datetime | |
--operator | string | Operator slug (required) | |
--status | string | Filter by status: OPEN, CLOSED, MANUALLY_CLOSED, CHANGED, DEACTIVATED |
Details
Get a quick summary of incident counts grouped by severity.
Returns three numbers: critical, warning, and closed incident counts. Accepts the same filters as 'incidents list' to scope the counts.
Related
Global flags (--output, --debug, --host, …) apply to every command. See the command reference overview.
What's next?
Last updated on