---
title: "oz0 incident"
description: "An incident is a tenant's record of something that went wrong."
canonical_url: "https://docs.oz0.ai/reference/cli/oz0/incident"
---
# oz0 incident

> An incident is a tenant's record of something that went wrong.

For: Operators and developers looking up a command.

An incident is a tenant's record of something that went wrong. It links the jobs, audit ranges, kill switches, receipts, egress denials, findings and other incidents that tell what happened; linking a job tags it incident:\<id>. Its clocks are computed from the regimes the tenant says apply (oz0 incident regimes): the built-in GDPR, NIS2, DORA and AI Act Art. 73 clocks are defaults to be confirmed, which a tenant edits.

The incident's owner and the tenant's admins are reminded before each deadline. Marking a stage notified records what you entered in OZ; it does not say that a notification was made or was enough.

Every change takes a reason (--reason, default $OZ0_REASON) and is in the audit log. The timeline export (oz0 incident export) verifies offline (oz0 incident verify). The tenant's admins may; once roles are data, incidents.read and incidents.manage (the auditor reads, the privacy officer manages).

## Usage

```bash
oz0 incident [command]
```

## Subcommands

- [`clock`](https://docs.oz0.ai/reference/cli/oz0/incident/clock)
- [`close`](https://docs.oz0.ai/reference/cli/oz0/incident/close)
- [`edit`](https://docs.oz0.ai/reference/cli/oz0/incident/edit)
- [`export`](https://docs.oz0.ai/reference/cli/oz0/incident/export)
- [`link`](https://docs.oz0.ai/reference/cli/oz0/incident/link)
- [`list`](https://docs.oz0.ai/reference/cli/oz0/incident/list)
- [`note`](https://docs.oz0.ai/reference/cli/oz0/incident/note)
- [`notify`](https://docs.oz0.ai/reference/cli/oz0/incident/notify)
- [`open`](https://docs.oz0.ai/reference/cli/oz0/incident/open)
- [`regimes`](https://docs.oz0.ai/reference/cli/oz0/incident/regimes)
- [`show`](https://docs.oz0.ai/reference/cli/oz0/incident/show)
- [`unlink`](https://docs.oz0.ai/reference/cli/oz0/incident/unlink)
- [`verify`](https://docs.oz0.ai/reference/cli/oz0/incident/verify)

## Flags

<table>
<thead>
  <tr>
    <th>
      Flag
    </th>
    
    <th>
      Type
    </th>
    
    <th>
      Default
    </th>
    
    <th>
      Description
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      <code>
        --tenant
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        default
      </code>
    </td>
    
    <td>
      the tenant
    </td>
  </tr>
</tbody>
</table>

## Inherited flags

<table>
<thead>
  <tr>
    <th>
      Flag
    </th>
    
    <th>
      Type
    </th>
    
    <th>
      Default
    </th>
    
    <th>
      Description
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      <code>
        --context
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        $OZ0_CONTEXT or &lt;config dir>/orchestrator-zero/context.json
      </code>
    </td>
    
    <td>
      CLI context file written by server init
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --log-level
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        info
      </code>
    </td>
    
    <td>
      log level: debug, info, warn or error
    </td>
  </tr>
</tbody>
</table>

See [all `oz0` commands](https://docs.oz0.ai/reference/cli/oz0) and the [global flags](https://docs.oz0.ai/reference/cli/oz0#global-flags).


## Sitemap

See the full [sitemap](https://docs.oz0.ai/sitemap.md) for all pages.