Transition incident
POST/api/security/incidents/:incident_id/transition
new -> investigating|resolved, investigating -> resolved, resolved -> closed|reopened, closed -> reopened,
reopened -> investigating|resolved. Anything else (including "to the same state") is 409. resolved needs a non-blank resolution;
closed keeps the recorded resolution and stamps closed_at; reopening clears resolved_at / closed_at / resolution (the timeline keeps them).
Request
Responses
- 200
- 401
- 403
- 422
Successful Response
The token is missing, invalid or expired. Refresh it, or sign in again.
Your role does not allow this. The detail names the missing permission or role.
Validation Error