ktm incidents counter

Use the ktm incidents counter command to quickly retrieve critical, warning, and closed incident counts for any operator.

Get incident counts: critical, warning, closed

Usage

ktm incidents counter [flags]

Examples

# Get incident counts for an operator
ktm incidents counter --operator my-operator

# Get counts for a specific alert
ktm incidents counter --operator my-operator --alert-id 42

# Get counts for the last 7 days
ktm incidents counter --operator my-operator --created-after 2026-03-12T00:00:00Z

Flags

FlagTypeDefaultDescription
--alert-idstringComma-separated alert definition IDs
--closed-afterstringFilter incidents closed after this ISO datetime
--closed-beforestringFilter incidents closed before this ISO datetime
--created-afterstringFilter incidents created after this ISO datetime
--created-beforestringFilter incidents created before this ISO datetime
--operatorstringOperator slug (required)
--statusstringFilter by status: OPEN, CLOSED, MANUALLY_CLOSED, CHANGED, DEACTIVATED

Details

Get a quick summary of incident counts grouped by severity.

Returns three numbers: critical, warning, and closed incident counts. Accepts the same filters as 'incidents list' to scope the counts.

Global flags (--output, --debug, --host, …) apply to every command. See the command reference overview.

What's next?

All commands

Browse the full CLI reference.

Get started

Install the CLI and authenticate.

Last updated on