---
title: "GET /audit-rules/{id}/"
method: GET
path: "/audit-rules/{id}/"
tags: ["audit-rules"]
---

# GET /audit-rules/{id}/

`GET /audit-rules/{id}/`

Get the fired rule by its id

## Path parameters

- `id` integer, required

## Response `200`

Return the fired rule by its id.

- AuditRuleDetail
  - `id` integer, required — ID of the fired rule
  - `name` string, required — Name of the fired rule
  - `status` string — Status of the fired rule
  - `activation_instance` object, required
    - `id` integer, nullable
    - `name` string
  - `organization` object, required
    - `id` integer
    - `name` string
    - `description` string
  - `ruleset_name` string — Name of the related ruleset
  - `created_at` string, date-time, required — The created timestamp of the action
  - `fired_at` string, date-time, required — The fired timestamp of the rule

## Changes

- **2024-04-23** `cbf68ddd9760` — 3 info
  - the endpoint scheme security `EDAJWTAuthentication` was added to the API
  - the endpoint scheme security `jwtAuth` was added to the API
  - added the required property `organization` to the response with the `200` status
- **2023-09-05** `011f9cfbad09` — 1 breaking, 1 warning
  - removed the required property `description` from the response with the `200` status
  - removed the optional property `definition` from the response with the `200` status
- **2023-08-21** `c84b4813cab1` — 2 breaking, 4 info
  - removed the required property `activation_id` from the response with the `200` status
  - removed the required property `activation_name` from the response with the `200` status
  - the endpoint scheme security `cookieAuth` was added to the API
  - added the optional property `ruleset_name` to the response with the `200` status
  - …2 more
- **2023-05-19** `f84d9240fdf2` — 1 info
  - the endpoint scheme security `cookieAuth` was removed from the API
- **2023-04-25** `62d33b790834` — 2 breaking, 1 warning, 5 info
  - removed the required property `activation_instance` from the response with the `200` status
  - removed the required property `organization` from the response with the `200` status
  - removed the optional property `ruleset_name` from the response with the `200` status
  - the endpoint scheme security `EDAJWTAuthentication` was removed from the API
  - …4 more

[Change history](https://skmtc.dev/ansible/apis/event-driven-ansible-api/changes/audit-rules/:id/get.md)

---

[API](https://skmtc.dev/ansible/apis/event-driven-ansible-api.md) · [All operations](https://skmtc.dev/ansible/apis/event-driven-ansible-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/ansible/event-driven-ansible-api/revisions/c04fc5f09692/schema)