Faceted search is a powerful mechanism for enhancing search functionality, allowing users to filter and refine search results dynamically using multiple dimensions or “facets.” These facets are predefined categories or attributes of the data. In Keep, the Incidents page supports faceted search by incident attributes.
Incident supports facets by direct Incident fields and also by Alert’s data linked to the Incident. Here is a list of properties you can create facets for:
name: Incident name
summary: Incident summary
creation_time: Incident creation time
start_time: Incident start time
end_time: Incident end time
last_seen_time: Incident last seen time
is_predicted: Whether the Incident is predicted
is_candidate: Whether the Incident is candidate
alerts_count: Number of alerts associated with the Incident
merged_at: When the Incident was merged
merged_by: Who merged the Incident
hasLinkedIncident: Whether the Incident has past incident linked
alert.*: Refers to alert properties in the Incident. Examples: alert.labels.monitor, alert.monitor, etc.