only pull incidents that are not marked as closed