oz0 incident open

Open an incident

For: Operators and developers looking up a command.

Open an incident

Usage

oz0 incident open [flags]

Flags

FlagTypeDefaultDescription
--aware-atstringnowwhen the tenant became aware: RFC 3339, or how long ago
--classified-atstringwhen it was classified, for regimes that count from classification
--jobstringsa job to link at once (repeat)
--jsonboolprint JSON instead of a table
--ownerstringwho answers for it: person:<account> or team:<name>
--reasonstringwhy, for the audit log (required; default $OZ0_REASON)
--regimestringsa regime that applies, such as gdpr, nis2, dora or ai_act_73 (repeat, or comma-separated)
--severitystringone of the tenant's severities, such as low, medium, high or critical (required)
--titlestringone line, at most 200 characters (required)

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error
--tenantstringdefaultthe tenant

See all oz0 commands and the global flags.

On this page
Copyright © 2026