Get all Incidents

description retrieves all incident records from servicenow, with customization options for display values and result count limitation endpoint url /api/now/v2/table/incident method get inputs parameters (object) sysparm query (string) encoded query used to filter the result set you can use a ui filter to obtain a properly encoded query syntax sysparm query=\<col name>\<operator>\<value> example sysparm query number=inc0000040 sysparm display value (string) determines the type of data returned, either the actual values from the database or the display values of the fields display values are manipulated based on the actual value in the database and user or system settings and preferences valid values are true returns the display values for all fields false returns the actual values from the database all returns both actual and display values sysparm exclude reference link (boolean) flag that indicates whether to exclude table api links for reference fields valid values are true exclude table api links for reference fields false include table api links for reference fields sysparm fields (string) comma separated list of fields to return in the response sysparm limit (number) maximum number of records to return for requests that exceed this number of records, use the sysparm offset parameter to paginate record retrieval this limit is applied before acl evaluation if no records return, including records you have access to, rearrange the record order so records you have access to return first sysparm no count (boolean) flag that indicates whether to execute a select count( ) query on the table to return the number of rows in the associated table valid values are true do not execute a select count( ) false execute a select count( ) sysparm offset (number) starting record index for which to begin retrieving records use this value to paginate record retrieval this functionality enables the retrieval of all records, regardless of the number of records, in small manageable chunks for example, the first time you call this endpoint, sysparm offset is set to "0" to simply page through all available records, use sysparm offset=sysparm offset+sysparm limit, until you reach the end of all records don't pass a negative number in the sysparm offset parameter sysparm query category (string) name of the category to use for queries sysparm query no domain (boolean) flag that indicates whether to restrict the record search to only the domains for which the logged in user is configured valid values are false exclude the record if it is in a domain that the currently logged in user is not configured to access true include the record even if it is in a domain that the currently logged in user is not configured to access sysparm suppress pagination header (boolean) flag that indicates whether to remove the link header from the response the link header provides various urls to relative pages in the record set which you can use to paginate the returned record set valid values are true remove the link header from the response false do not remove the link header from the response sysparm view (string) ui view for which to render the data determines the fields returned in the response valid values are desktop, mobile, both if you also specify the sysparm fields parameter, it takes precedent output example \[ { "status code" 200, "response headers" { "server timing" "sem wait;dur=0, sesh wait;dur=0", "content encoding" "gzip", "x is logged in" "true", "x transaction id" "7d9414489707", "link" "\<https //dev130168 service now\ com/api/now/v2/table/incident?query=number%3dinc0000040\&display value=true\&sysparm limit=1\&sysparm offset=0>;rel=\\"first\\",\<https //dev130168 service now\ com/api/now/v2/table/incident?query=number%3dinc0000040\&display value=true\&sysparm limit=1\&sysparm offset= 1>;rel=\\"prev\\",\<https //dev130168 service now\ com/api/now/v2/table/incident?query=number%3dinc0000040\&display value=true\&sysparm limit=1\&sysparm offset=1>;rel=\\"next\\",\<https //dev130168 service now\ com/api/now/v2/table/incident?query=number%3dinc0000040\&display value=true\&sysparm limit=1\&sysparm offset=66>;rel=\\"last\\"", "x total count" "67", "x content type options" "nosniff", "pragma" "no store,no cache", "cache control" "no cache,no store,must revalidate,max age= 1", "expires" "0", "content type" "application/json;charset=utf 8", "transfer encoding" "chunked", "date" "thu, 03 nov 2022 20 32 32 gmt", "keep alive" "timeout=20", "connection" "keep alive", "server" "servicenow", "set cookie" "glide user=; max age=0; expires=thu, 01 jan 1970 00 00 10 gmt; path=/; httponly; samesite=none; secure, glide user session=; max age=0; expires=thu, 01 jan 1970 00 00 10 gmt; path=/; httponly; samesite=none; secure, glide user route=glide f6d1c4085a807931391acf9b7192b09e; max age=2147483647; expires=tue, 21 nov 2090 23 46 39 gmt; path=/; httponly; samesite=none; secure, glide session store=6d941c849707111084d57e121153aff6; max age=1800; expires=thu, 03 nov 2022 21 02 32 gmt; path=/; httponly; samesite=none; secure", "strict transport security" "max age=63072000; includesubdomains" }, "reason" "ok", "json body" { "result" \[ { "parent" "", "made sla" "true", "caused by" "", "watch list" "", "upon reject" "cancel", "sys updated on" "2016 12 14 02 46 44", "child incidents" "0", "hold reason" "", "origin table" "", "task effective number" "inc0000060", "approval history" "", "number" "inc0000060", "resolved by" { "link" "https //dev130168 service now\ com/api/now/v2/table/sys user/5137153cc611227c000bbd1bd8cd2007", "value" "5137153cc611227c000bbd1bd8cd2007" }, "sys updated by" "employee", "opened by" { "link" "https //dev130168 service now\ com/api/now/v2/table/sys user/681ccaf9c0a8016400b98a06818d57c7", "value" "681ccaf9c0a8016400b98a06818d57c7" }, "user input" "", "sys created on" "2016 12 12 15 19 57", "sys domain" { "link" "https //dev130168 service now\ com/api/now/v2/table/sys user group/global", "value" "global" }, "state" "7", "route reason" "", "sys created by" "employee", "knowledge" "false", "order" "", "calendar stc" "102197", "closed at" "2016 12 14 02 46 44", "cmdb ci" { "link" "https //dev130168 service now\ com/api/now/v2/table/cmdb ci/109562a3c611227500a7b7ff98cc0dc7", "value" "109562a3c611227500a7b7ff98cc0dc7" }, "delivery plan" "", "contract" "", "impact" "2", "active" "false", "work notes list" "", "business service" { "link" "https //dev130168 service now\ com/api/now/v2/table/cmdb ci service/27d32778c0a8000b00db970eeaa60f16", "value" "27d32778c0a8000b00db970eeaa60f16" }, "business impact" "", "priority" "3", "sys domain path" "/", "rfc" "", "time worked" "", "expected start" "", "opened at" "2016 12 12 15 19 57", "business duration" "1970 01 01 08 00 00", "group list" "", "work end" "", "caller id" { "link" "https //dev130168 service now\ com/api/now/v2/table/sys user/681ccaf9c0a8016400b98a06818d57c7", "value" "681ccaf9c0a8016400b98a06818d57c7" }, "reopened time" "", "resolved at" "2016 12 13 21 43 14", "approval set" "", "subcategory" "email", "work notes" "", "universal request" "", "short description" "unable to connect to email", "close code" "solved (permanently)", "correlation display" "", "delivery task" "", "work start" "", "assignment group" { "link" "https //dev130168 service now\ com/api/now/v2/table/sys user group/287ebd7da9fe198100f92cc8d1d2154e", "value" "287ebd7da9fe198100f92cc8d1d2154e" }, "additional assignee list" "", "business stc" "28800", "cause" "", "description" "i am unable to connect to the email server it appears to be down ", "origin id" "", "calendar duration" "1970 01 02 04 23 17", "close notes" "this incident is resolved ", "notify" "1", "service offering" "", "sys class name" "incident", "closed by" { "link" "https //dev130168 service now\ com/api/now/v2/table/sys user/681ccaf9c0a8016400b98a06818d57c7", "value" "681ccaf9c0a8016400b98a06818d57c7" }, "follow up" "", "parent incident" "", "sys id" "1c741bd70b2322007518478d83673af3", "contact type" "self service", "reopened by" "", "incident state" "7", "urgency" "2", "problem id" "", "company" { "link" "https //dev130168 service now\ com/api/now/v2/table/core company/31bea3d53790200044e0bfc8bcbe5dec", "value" "31bea3d53790200044e0bfc8bcbe5dec" }, "reassignment count" "2", "activity due" "2016 12 13 01 26 36", "assigned to" { "link" "https //dev130168 service now\ com/api/now/v2/table/sys user/5137153cc611227c000bbd1bd8cd2007", "value" "5137153cc611227c000bbd1bd8cd2007" }, "severity" "3", "comments" "", "approval" "not requested", "sla due" "", "comments and work notes" "", "due date" "", "sys mod count" "15", "reopen count" "0", "sys tags" "", "escalation" "0", "upon approval" "proceed", "correlation id" "", "location" "", "category" "inquiry" } ] } } ] output parameters status code (number) reason (string) json body (object) result (array) parent (string) made sla (string) caused by (string) watch list (string) upon reject (string) sys updated on (string) child incidents (string) hold reason (string) origin table (string) task effective number (string) approval history (string) number (string) resolved by (object) link (string) value (string) sys updated by (string) opened by (object) link (string) value (string) user input (string) sys created on (string) sys domain (object) link (string) value (string) state (string) route reason (string) sys created by (string) knowledge (string) order (string) calendar stc (string) closed at (string) cmdb ci (object) link (string) value (string) delivery plan (string) contract (string) impact (string) active (string) work notes list (string) business service (object) link (string) value (string) business impact (string) priority (string) sys domain path (string) rfc (string) time worked (string) expected start (string) opened at (string) business duration (string) group list (string) work end (string) caller id (object) link (string) value (string) reopened time (string) resolved at (string) approval set (string) subcategory (string) work notes (string) universal request (string) short description (string) close code (string) correlation display (string) delivery task (string) work start (string) assignment group (object) link (string) value (string) additional assignee list (string) business stc (string) cause (string) description (string) origin id (string) calendar duration (string) close notes (string) notify (string) service offering (string) sys class name (string) closed by (object) link (string) value (string) follow up (string) parent incident (string) sys id (string) contact type (string) reopened by (string) incident state (string) urgency (string) problem id (string) company (object) link (string) value (string) reassignment count (string) activity due (string) assigned to (object) link (string) value (string) severity (string) comments (string) approval (string) sla due (string) comments and work notes (string) due date (string) sys mod count (string) reopen count (string) sys tags (string) escalation (string) upon approval (string) correlation id (string) location (string) category (string) response headers header type server timing string content encoding string x is logged in string x transaction id string link string x total count string x content type options string pragma string cache control string expires string content type string transfer encoding string date string keep alive string connection string server string set cookie string strict transport security string