Hi @Roshin Chandra ,
Thanks for the explanation. Why then not "just" create a scheduled report based in the incident_sla for incidents that is not in state resolved, cancelled or closed and where breached is true?
This would give the same solution as far as I understand without any custom script.
If my answer has helped with your question, please mark my answer as accepted solution and give a thumb up,
Best regards
Anders
