Incident Variables

You can use incident variables in different parts of Rootly like:

Slack title format
Postmortem templates
Genius workflow blocks
etc.

Variables

Use the Liquid Markup explorer to navigate through all incident variables.

Rootly uses the Liquid template language. The available variables are:

Ruby

{{ incident.id }} # returns string
{{ incident.sequential_id }} # returns integer
{{ incident.slug }} # returns string
{{ incident.title }} # returns string
{{ incident.summary }} # returns string
{{ incident.status }} # returns string
{{ incident.labels }} # returns array
{{ incident.timeline }} # returns array
{{ incident.timeline_table }} # returns string
{{ incident.timeline_table_markdown }} # returns string
{{ incident.timeline_table_markdown2 }} # returns string
{{ incident.timeline_table_atlassian }} # returns string
# DEPRECATED {{ incident.status_page_timeline }} # returns array
# DEPRECATED {{ incident.status_page_timeline_table }} # returns string
# DEPRECATED {{ incident.status_page_timeline_table_markdown }} # returns string
# DEPRECATED {{ incident.status_page_timeline_table_markdown2 }} # returns string
# See section below for new way
{{ incident.severity }} # returns string
{{ incident.severity_slug }} # returns string
{{ incident.environments }} # returns array
{{ incident.environment_slugs }} # returns array
{{ incident.raw_environments }} # returns array of objects
{{ incident.types }} # returns array
{{ incident.types_slugs }} # returns array
{{ incident.raw_types }} # returns array of objects
{{ incident.services }} # returns array
{{ incident.services_slug }} # returns array
{{ incident.raw_services }} # returns array of objects
{{ incident.functionalities }} # returns array
{{ incident.functionality_slugs }} # returns array
{{ incident.raw_functionalities }} # returns array of objects
{{ incident.groups }} # returns array
{{ incident.group_slugs }} # returns array
{{ incident.raw_groups }} # returns array of objects
{{ incident.created_at }} # returns datetime
{{ incident.started_at }} # returns datetime
{{ incident.detected_at }} # returns datetime
{{ incident.acknowledged_at }} # returns datetime
{{ incident.mitigated_at }} # returns datetime
{{ incident.resolved_at }} # returns datetime
{{ incident.time_to_mitigation }} # returns integer (in hours)
{{ incident.mitigation_message }} # return string
{{ incident.time_to_resolution }} # returns integer (in hours)
{{ incident.resolution_message }} # return string
{{ incident.time_to_detection }} # returns integer (in hours)
{{ incident.detection_duration }} # returns integer (in seconds)
{{ incident.mitigation_duration }} # returns integer (in seconds)
{{ incident.time_to_acknowledge }} # returns integer (in hours)
{{ incident.acknowledge_duration }} # returns integer (in seconds)
{{ incident.duration }} # returns integer (in seconds)
{{ incident.url }} # returns string
{{ incident.short_url }} # returns string
{{ incident.retrospective_id }} # returns integer
{{ incident.retrospective_url }} # returns string
{{ incident.retrospective_short_url }} # returns string
{{ incident.retrospective_progress_status }} # returns string eg. not_started, active, completed, skipped
{{ incident.postmortem_url }} # returns string (legacy alias for retrospective_url)
{{ incident.notify_emails }} # returns array of string
{{ incident.creator }} # returns object eg. {"id":49, "name":"John Doe", "email":"john@acme.com"}
{{ incident.in_triage }} # returns object eg. {"id":49, "name":"John Doe", "email":"john@acme.com"}
{{ incident.started_by }} # returns object eg. {"id":49, "name":"John Doe", "email":"john@acme.com"}
{{ incident.mitigated_by }} # returns object eg. {"id":49, "name":"John Doe", "email":"john@acme.com"}
{{ incident.resolved_by }} # returns object eg. {"id":49, "name":"John Doe", "email":"john@acme.com"}
{{ incident.cancelled_by }} # returns object eg. {"id":49, "name":"John Doe", "email":"john@acme.com"}
{{ incident.roles }} # returns array of objects eg. [{"incident_role": {"name" : "Commander"}, "user": {name: "John Doe", email: "john@acme.com"}}]
{{ incident["<role-slug>"] }} # returns the user assigned to that role eg. {"name":"John Doe", "full_name":"John Doe", "email":"john@acme.com", "slack_id":"U01ABC2DEF"}
{{ incident.custom_fields }} # returns array of objects eg. [{"custom_fields": {"slug" : "my-custom-field"}, "selected_options": {value: ["Foo", "Bar"]}}]
{{ incident.scheduled_for }} # Returns datetime
{{ incident.scheduled_until }} # Returns datetime

# Integrations
{{ incident.zoom_meeting_id }} # returns string
{{ incident.zoom_meeting_start_url }} # returns string
{{ incident.zoom_meeting_join_url }} # returns string
{{ incident.webex_meeting_id }} # returns string
{{ incident.webex_meeting_url }} # returns string
{{ incident.shortcut_story_id }} # returns string
{{ incident.shortcut_story_url }} # returns string
{{ incident.shortcut_task_id }} # returns string
{{ incident.shortcut_task_url }} # returns string
{{ incident.asana_task_id }} # returns string
{{ incident.asana_task_url }} # returns string
{{ incident.motion_task_id }} # returns string
{{ incident.motion_task_url }} # returns string
{{ incident.jira_issue_id }} # returns string
{{ incident.jira_issue_key }} # returns string
{{ incident.jira_issue_url }} # returns string
{{ incident.google_meeting_id }} # returns string
{{ incident.google_meeting_url }} # returns string
{{ incident.trello_card_id }} # returns string
{{ incident.trello_card_url }} # returns string
{{ incident.linear_issue_id }} # returns string
{{ incident.linear_issue_key }} # returns string
{{ incident.linear_issue_url }} # returns string
{{ incident.zendesk_ticket_id }} # returns string
{{ incident.zendesk_ticket_url }} # returns string
{{ incident.slack_channel_name }} # returns string
{{ incident.slack_channel_id }} # returns string
{{ incident.slack_channel_url }} # returns string
{{ incident.slack_channel_short_url }} # returns string
{{ incident.slack_channel_deep_link }} # returns string
{{ incident.microsoft_teams_channel_id }} # returns string
{{ incident.microsoft_teams_channel_name }} # returns string
{{ incident.microsoft_teams_channel_url }} # returns string
{{ incident.microsoft_teams_chat_id }} # returns string
{{ incident.microsoft_teams_chat_url }} # returns string
{{ incident.google_chat_space_id }} # returns string
{{ incident.google_chat_space_name }} # returns string
{{ incident.google_chat_space_url }} # returns string
{{ incident.google_chat_space_short_url }} # returns string
{{ incident.google_chat_space_archived }} # returns boolean
{{ incident.google_chat_space_domain_id }} # returns string
{{ incident.service_now_incident_id }} # returns string
{{ incident.service_now_incident_url }} # returns string
{{ incident.opsgenie_incident_id }} # returns string
{{ incident.opsgenie_incident_url }} # returns string
{{ incident.victor_ops_incident_id }} # returns string
{{ incident.victor_ops_incident_url }} # returns string
{{ incident.pagerduty_incident_id }} # returns string
{{ incident.pagerduty_incident_number }} # returns string
{{ incident.pagerduty_incident_url }} # returns string
{{ incident.mattermost_channel_id }} # returns string
{{ incident.mattermost_channel_name }} # returns string
{{ incident.mattermost_channel_url }} # returns string
{{ incident.confluence_page_id }} # returns string
{{ incident.confluence_page_url }} # returns string
{{ incident.airtable_base_key }} # returns string
{{ incident.airtable_table_name }} # returns string
{{ incident.airtable_record_id }} # returns string
{{ incident.airtable_record_url }} # returns string
{{ incident.google_drive_id }} # returns string
{{ incident.google_drive_url }} # returns string
{{ incident.notion_page_id }} # returns string
{{ incident.notion_page_url }} # returns string
{{ incident.datadog_notebook_id }} # returns string
{{ incident.datadog_notebook_url }} # returns string
{{ incident.freshservice_ticket_id }} # returns string
{{ incident.freshservice_ticket_url }} # returns string
{{ incident.freshservice_task_id }} # returns string
{{ incident.freshservice_task_url }} # returns string

Examples

Ruby

incident-{{ incident.started_at | date: "%Y%m%d" }}-{{ incident.slug }}
# Will result in: incident-20210412-customers-unable-to-place-orders-on-our-website
incident-{{ incident.created_at | date: "%Y%m%d" }}-{{ incident.jira_issue_url | split: "/" | last}}
# Will result in: incident-20210412-ROOT-233
{{ incident.created_at | in_time_zone: "Europe/London" | date: "%Y-%m-%d" }}
# Will result in: 2021-04-12

Reference a Single Role

To use one specific role — the commander in a page, the retrospective owner in a reminder — reference it directly by its slug rather than looping over every role and filtering:

Ruby

{{ incident["post-mortem-owner"].name }}
{{ incident["post-mortem-owner"].full_name }}
{{ incident["post-mortem-owner"].email }}
{{ incident["post-mortem-owner"].slack_id }}

The value is the user assigned to that role, so the user fields hang directly off it — there is no .user step as there is inside the loop.

This shape holds for single-assignee roles only. A role configured to allow multiple assignees returns an array of users instead, so {{ incident["<role-slug>"].name }} renders nothing for it. Loop over it:

{% for responder in incident["<role-slug>"] %}{{ responder.name }}{% unless forloop.last %}, {% endunless %}{% endfor %}

Check the role’s multiple-assignee setting before writing the template — the two shapes look identical until the role has more than one person in it.

Use bracket notation consistently. Any slug containing a hyphen breaks dot notation — {{ incident.post-mortem-owner }} is not valid Liquid, because the hyphens are read as subtraction. A single-word slug like commander would work either way, but writing every role the same way means you do not have to think about it: incident["post-mortem-owner"].

The slug is the role’s own slug, not its display name, and the two can diverge — a role displayed as “Retrospective Owner” may still carry the slug post-mortem-owner from before the terminology changed. Deriving the accessor from what you see on screen is how these templates break. Check the role in Incident Roles and copy the slug from there.

A role with nobody assigned returns nothing, and the surrounding text still renders. A message reading “Paging: ” with an empty space is easy to miss in a template that looked fine when you tested it against an incident that had the role filled.Guard it when the role is not guaranteed:

Ruby

{%- if incident["post-mortem-owner"] -%}
  Retrospective owner: {{ incident["post-mortem-owner"].full_name }}
{%- else -%}
  Retrospective owner: not yet assigned
{%- endif -%}

List Roles

To render every role at once, loop instead. Note that inside the loop the user is one level down, under role.user:

Ruby

{%- for role in incident.roles -%}
  {%- if role.user -%}
    {{ role.incident_role.name }} : {{ role.user.full_name }}
  {%- else -%}
    {{ role.incident_role.name }} : N/A
  {%- endif -%}
{%- endfor -%}

# Will result of:
# Commander: John Doe
# Scriber: N/A

List Custom Fields

Ruby

# Text Field
{{ incident.custom_fields | find: 'custom_field.slug', 'your_custom_field_slug' | get: 'selected_options.value' }}

# Select & Multi Select
{{ incident.custom_fields | find: 'custom_field.slug', 'your_custom_field_slug' | get: 'selected_options' | map: 'value' }}

# Select & Multi Select using Teams options
{{ incident.custom_fields | find: 'custom_field.slug', 'custom-field-groups' | get: 'selected_groups' | map: 'name' }}

# Select & Multi Select using Services options
{{ incident.custom_fields | find: 'custom_field.slug', 'custom-field-services' | get: 'selected_services' | map: 'name' }}

# Users Field
{{ incident.custom_fields | find: 'custom_field.slug', 'your_custom_field_slug' | get: 'selected_users' | map: 'full_name' }}

List Timeline Events

Ruby

{% for item in incident.events %}
  {{ item.occurred_at }} - {{ item.event }}
{% endfor %}

Convert Timeline Events to Table

Ruby

# ASCII Table
{{ incident.events | to_table: 'events', 'Hello world', 'America/Los_Angeles' }}
# Returns
# +---------------------------------------------------+
# |                    Hello world                    |
# +------------------------------+----------+---------+
# | Date                         | User     | Event   |
# +------------------------------+----------+---------+
# | December 8 2022 23:04:28 PST | John D   | Event 1 |
# | December 8 2022 23:04:28 PST | Dalyte K | Event 2 |
# +------------------------------+----------+---------+

# Markdown table
{{ incident.events | to_table: 'events', 'Hello world', 'America/Los_Angeles', 'markdown' }}
# Returns
# |                    Hello world                    |
# |------------------------------|----------|---------|
# | Date                         | User     | Event   |
# | December 8 2022 23:04:28 PST | John D   | Event 1 |
# | December 8 2022 23:04:28 PST | Dalyte K | Event 2 |

# Atlassian table
{{ incident.events | to_table: 'events', 'Hello world', 'America/Los_Angeles', 'atlassian_markdown' }}
# Returns
# h2. Hello world

# ||Date||User||Event||
# |December 8 2022 23:04:28 PST|John D|Event 1. [Link|https://dummy]|
# |December 8 2022 23:04:28 PST|Dalyte K|Event 2. [Link|https://dummy]|

# HTML table
{{ incident.events | to_table: 'events', 'Hello world', 'America/Los_Angeles', 'html' }}
# Returns
# <h2>Hello world</h2>

# <table>
#   <tr>
#     <th>Date</th>
#     <th>User</th>
#     <th>Event</th>
#   </tr>
#   <tr>
#      <td>December 8 2022 23:04:28 PST</td>
#      <td>John D</td>
#      <td>Event 1</td>
#   </tr>
#   <tr>
#     <td>December 8 2022 23:04:28 PST</td>
#     <td>Dalyte K</td>
#     <td>Event 2</td>
#   </tr>
# </table>

List Action Items

Ruby

{% for item in incident.action_items %}
  {{ item.summary }}
  Kind: {{item.kind}}
  Priority: {{item.priority}}
  Status: {{item.status}}
{% endfor %}

Convert Action Items to Table

Ruby

# ASCII Table
{{ incident.action_items | to_table: 'action_items', 'Hello world', 'America/Los_Angeles' }}
# Returns
# +------------------------------------------------------------------------------------------------------------------------+
# |                                                      Hello world                                                       |
# +------------------------------+------------------------------+-----------+----------+--------+----------+---------------+
# | Creation Date                | Due Date                     | Kind      | Priority | Status | Assignee | Summary       |
# +------------------------------+------------------------------+-----------+----------+--------+----------+---------------+
# | December 7 2022 23:04:28 PST | December 8 2022 00:00:00 PST | Task      | Low      | Open   | John D   | Action Item 1 |
# | December 7 2022 23:04:28 PST | December 8 2022 00:00:00 PST | Follow Up | High     | Done   | Dalyte K | Action Item 2 |
# +------------------------------+------------------------------+-----------+----------+--------+----------+---------------+

# Markdown table
{{ incident.action_items | to_table: 'action_items', 'Hello world', 'America/Los_Angeles', 'markdown' }}
# Returns
# |                                                      Hello world                                                       |
# |------------------------------|------------------------------|-----------|----------|--------|----------|---------------|
# | Creation Date                | Due Date                     | Kind      | Priority | Status | Assignee | Summary       |
# | December 7 2022 23:04:28 PST | December 8 2022 00:00:00 PST | Task      | Low      | Open   | John D   | Action Item 1 |
# | December 7 2022 23:04:28 PST | December 8 2022 00:00:00 PST | Follow Up | High     | Done   | Dalyte K | Action Item 2 |

# Atlassian table
{{ incident.action_items | to_table: 'action_items', 'Hello world', 'America/Los_Angeles', 'atlassian_markdown' }}
# Returns
# h2. Hello world
# ||Creation Date||Due Date||Kind||Priority||Status||Assignee||Summary||
# |December 7 2022 23:04:28 PST|December 8 2022 00:00:00 PST|Task|Low|Open|John D|Action Item 1. [Link|https://dummy]|
# |December 7 2022 23:04:28 PST|December 8 2022 00:00:00 PST|Follow Up|High|Done|Dalyte K|Action Item 2. [Link|https://dummy]|

# HTML table
{{ incident.action_items | to_table: 'action_items', 'Hello world', 'America/Los_Angeles', 'html' }}
# Returns
#      <h2>Hello world</h2>
#
#      <table>
#        <tr>
#          <th>Creation Date</th>
#          <th>Due Date</th>
#          <th>Kind</th>
#          <th>Priority</th>
#          <th>Status</th>
#          <th>Assignee</th>
#          <th>Summary</th>
#        </tr>
#        <tr>
#          <td>December 7 2022 23:04:28 PST</td>
#          <td>December 8 2022 00:00:00 PST</td>
#          <td>Task</td>
#          <td>Low</td>
#          <td>Open</td>
#          <td>John D</td>
#          <td>Action Item 1</td>
#        </tr>
#        <tr>
#          <td>December 7 2022 23:04:28 PST</td>
#          <td>December 8 2022 00:00:00 PST</td>
#          <td>Follow Up</td>
#          <td>High</td>
#          <td>Done</td>
#          <td>Dalyte K</td>
#          <td>Action Item 2</td>
#        </tr>
#      </table>

Additional Filters

Ruby

# Find
# Input: {"books": [{ "id": 1, title: "hello" }, { "id": 2, title: "world" }] }
# Output: { "id": 2, title: "world" }

{ hash.books | find: 'id', '2' }

# Get
# Input: {"books": [{ "id": 1, title: "hello", category: {name: "History"} }}, { "id": 2, title: "world", category: {name: "SciFi"} }] }
# Output: "SciFi"

{ hash.books | find: 'id', '2' | get: 'category.name'}

# in_time_zone

{ 'now' | in_time_zone: "Europe/London" }

# smart_date

{ 'now' | smart_date: '2 days ago' }
{ 'now' | smart_date: '2 days ago' | in_time_zone: "Europe/London" }
{ 'now' | smart_date: '4 days from now' | in_time_zone: "Europe/London" }
{ 'now' | smart_date: 'yesterday' | in_time_zone: "Europe/London" }

# iso8601

{ 'now' | to_iso8601 }

# Distance of time in words
{ 'now' | smart_date: '2 days ago' | distance_of_time_in_words_from_now } # 2 days

Action Item Variables

Reference follow-ups linked to the incident from action item workflows.

Team Variables

Reference team attributes — owners, Slack channels, on-call responders — from workflows.

Alert Variables

Reference alert attributes from alert workflows and routing actions.

Getting Started

Alerts

On-Call

Incident Response

Atlas

AI SRE

Rootly AI

Retrospectives

Status Pages

Communications

Workflows & Automation

Analytics

Configuration

Integrations

Administration

Resources & Help

Incident Variables

Variables

Examples

Reference a Single Role

List Roles

List Custom Fields

List Timeline Events

Convert Timeline Events to Table

List Action Items

Convert Action Items to Table

Additional Filters

Action Item Variables

Team Variables

Alert Variables

​Variables

​Examples

​Reference a Single Role

​List Roles

​List Custom Fields

​List Timeline Events

​Convert Timeline Events to Table

​List Action Items

​Convert Action Items to Table

​Additional Filters

​Related Pages

Action Item Variables

Team Variables

Alert Variables

Variables

Examples

Reference a Single Role

List Roles

List Custom Fields

List Timeline Events

Convert Timeline Events to Table

List Action Items

Convert Action Items to Table

Additional Filters

Related Pages