Time since last major incident

Major incidents don’t just test how well you respond. They reveal how resilient your system truly is. One of the simplest but most powerful reliability indicators is "how long has it been since our last major incident?"

If the answer is measured in months, your environment is stable. If it’s measured in days or hours, something deeper may be wrong.

Before you begin

This tile pairs best with:

• Active major incidents
• Major incident status
• Ticket creation rate

Together, these tiles give you both immediate awareness and long-term resilience insight.

Configuring the tile

Configure the following in the tile editor:

1. Data Source: Select ServiceNow.
2. Data Stream: Select Table Query.
3. Parameters:
   1. Table name: Select Incident.
   2. Filter query: Enter a query to return your major incidents. For example, active=true^priority=1.
4. SQL Analytics: Enable the toggle.
   1. SQL > Query: Use a query such as the following to calculate minutes since the last major incident:
      
      Copy

      SELECT
        ABS(
          CAST(
            DATE_DIFF(
              'minute',
              TRY_CAST(opened_at AS TIMESTAMPTZ),
              NOW()
            ) AS INTEGER
          )
        ) AS minutes_active
      
      FROM dataset1
      ORDER BY minutes_active ASC;

   2. Columns: Configure the Minutes Active column:
      1. Type: Select Minutes.
      2. Decimal places: Enter 0.
5. Visualization: Select Scalar.
   1. Mapping > Value: select Minutes Active.
6. Click Save.

Was this article helpful?