Is it possible to perform a query against the data when a status change within an incident has occurred?