New Relic data dictionary

This data dictionary defines some of our default-reported data stored in NRDB and queryable via NRQL. This includes events like Transaction, MobileRequest, and BrowserInteraction, and our Metric, Log, and Span data types. These definitions are also available from our query builder UI by mousing over applicable data type and attribute names.

This dictionary doesn't contain:

  • Data from our infrastructure integrations (for that, see docs for a specific integration)
  • Custom data
  • Detailed integration-specific attributes for Metric data

NrAiIncident

Data source:

An NrAiIncident is created when violation of an alerts condition generates a violation event, which passes important information downstream.

Attribute nameDefinitionData types
accountId

The ID of the account where the violation occurred.

Available for muting rules.

aggregationDuration

The active condition's aggregation window.

closeCause

If applicable, what caused the incident to close. Available values:

  • CONDITION_DELETED: condition deleted.
  • CONDITION_DISABLED condition disabled.
  • CONDITION_MODIFIED condition edited
  • EVALUATOR: natural close because the metric has ceased to breach the threshold.
  • EXPIRED: incident closed due to TTL.
  • INCIDENT_WORKFLOW_INTEGRATION: a third party closed the issue or incident through an API call.
  • LABEL_BINDINGS_CHANGED : label was removed from the target, causing it to no longer be covered by the condition. This only applies to APM/Mobile/Browser/Infrastructure conditions.
  • LOSS_OF_SIGNAL: signal was lost, and incident was closed based on loss of signal settings.
  • MAINTENANCE: New Relic was performing maintenance and we closed the incident as part of it.
  • POLICY_DELETED: policy was deleted.
  • TARGET_REMOVED: the target was removed from the condition.
  • USER: closed manually by a user.
closeTime

The timestamp when the incident was closed.

closeViolationsOnExpiration

If true, open violations on the signal are closed if the signal is lost. Default is false. To use this field, an expirationDuration must be specified.

conditionId

The ID of the condition that triggered the violation.

Available for muting rules.

conditionName

The name of the condition that triggered the violation.

Available for muting rules.

degradationTime

The timestamp when the targeted metric started to breach the active condition’s threshold.

description

The contents of the active condition’s Violation Description field.

NRQL or Infrastructure conditions only.

entity.guid
ID

The GUID, assigned by New Relic, for the New Relic-monitored entity (host, application, etc.). This value is stored as a Base64 encoded value.

entity.name

The targeted entity's name, if available.

entity.type

The targeted entity's type, if available.

evaluationOffsetSeconds

The active condition's evaluation offset. A time delay (in seconds) to ensure data points are placed in the correct aggregation window.

evaluationType

The reason the violation was opened. Available values:

  • threshold (the condition threshold was breached)
  • expiration (the entity's signal was lost)
  • anomaly (an automatic anomaly was generated)
event

The record's event type.

Available values: open and close.

expirationDuration

The active condition's signal loss time window.

incidentId

The unique identifier of the violation.

muted

Shows whether the active condition was muted at the time of the incident event.

mutingRuleId

The unqiue identifier of the muting rule that caused the violation to be muted.

nrqlEventType

The type of data targeted by a NRQL condition. In this context, this refers to any NRQL-queryable data type.

Available for muting rules.

nrqlQuery

The full string of the NRQL query. Can be used for sub-string matching on attributes in the WHERE clause.

Available for muting rules.

openTime

The timestamp when the violation was opened.

operator

The violation threshold's operator, such as =, <, or >.

For signal loss violations, this is an empty string.

policyId

The ID of the policy that triggered the violation.

Available for muting rules.

policyName

The name of the policy that triggered the violation.

Available for muting rules.

priority

The incident's priority: low, medium, high, or critical. Default: high.

recoveryTime

The timestamp when the active condition's targeted metric stops breaching the threshold.

runbookUrl

The runbook URL for the condition that triggered the violation.

Available for muting rules.

tags.*

Arbitrary key-value metadata, or tags, associated with the violation. tags. is the prefix and * is the metadata/tag name. For details on how to use this, see the documentation for muting rules or alerts condition descriptions.

Available for muting rules.

targetName

The name of the violation’s target. This can be an entity or a query.

Available for muting rules.

threshold

The active condition's threshold value.

thresholdDuration

The active condition's threshold time window.

thresholdOccurrences

Shows whether for at least or at least once in occurrence values are being used in the active condition's threshold. Available values: all or any.

timestamp

The event's wall clock time using an epoch timestamp.

title

The incident's title.

type

The incident's type.

Available values: Incident.

valueFunction

The active condition's aggregation function.

Used in APM, browser, and mobile alert condition types.

violationTimeLimitSeconds

The active condition's violation time limit setting.

violationUuId

Deprecated. Do not use.