New Relic data dictionary

This data dictionary defines some of our default-reported data stored in NRDB and queryable via NRQL. This includes events like Transaction, MobileRequest, and BrowserInteraction, and our Metric, Log, and Span data types. These definitions are also available from our query builder UI by mousing over applicable data type and attribute names.

This dictionary doesn't contain:

  • Data from our infrastructure integrations (for that, see docs for a specific integration)
  • Custom data
  • Detailed integration-specific attributes for Metric data

NrAiIssue

Data source:

An NrAiIssue is created when a threshold of an alert condition generates an incident event, which passes important information downstream.

Attribute nameDefinitionData types
accountIds
ID

ID of the account where incidents occurred.

activateTime

The timestamp when the issue was activated.

closeCause

What caused the incident to close. Available values:

  • CLOSED_BY_ISSUE: Issue in a created state that closed naturally before activation.

  • CLOSED_BY_USER: Issue in a created state that the user closes before activation.

  • CLOSE_INACTIVE: Issue reached 5000 (max) incidents.

  • closeTtl: Issue closed due to issue TTL (issue settings).

  • CONDITION_DELETED: Condition deleted.

  • CONDITION_DISABLED: Condition disabled.

  • CONDITION_MODIFIED: Condition edited.

  • EVALUATOR: Natural close because the metric has ceased to breach the threshold.

  • EXPIRED: Incident closed due to TTL.

  • INCIDENT_CLOSED: The issue contains only anomalies and is closed when the last anomaly is closed.

  • LOSS_OF_SIGNAL: Signal was lost, and incident was closed based on loss of signal settings.

  • POLICY_DELETED: Policy was deleted.

  • TARGET_REMOVED: The target was removed from the condition.

  • thirdPartyIntegration: A third party closed the issue through an API call.

  • USER: Closed manually by a user on the legacy version.

  • userAction: Closed manually by a user.

closeTime

The timestamp when the incident was closed.

correlated

Indicates whether the issue was correlated (true/false).

correlatedCandidate

Indicates whether the issue was a correlated candidate (true/false).

correlationRuleIds
ID

The unique identifier of the correlation rule.

correlationRuleNames

The name of the correlation rule.

createTime

The timestamp when the issue was created.

entitiesCount
count

Number of impacted entities.

entity.names

The name of the targeted entity.

entity.types

The type of the targeted entity.

event

The event type of the record.

incidentCount
count

Number of incidents in the issue.

incidentIds
ID

The unique identifiers of the issue's incidents.

isIdle
ID

Indicates whether the issue is idle (true/false).

issueId
ID

The unique identifier of the issue.

issueLink

Link to the issue page.

lastModifiedTime
millisecond (s)

The timestamp of the last modification.

muted

Shows whether the active condition was muted at the time of the incident event.

parentId
ID

The unique identifier of the parent issue.

priority

The issue's priority: LOW, MEDIUM, HIGH, or CRITICAL. Default: HIGH.

sources

If applicable, the source of the issue.

timestamp

The wall clock time of the event using an epoch timestamp.

title

The incident's title.