---
title: "Get all critical assets"
method: GET
path: "/api/v2/security_monitoring/configuration/critical_assets"
tags: ["Security Monitoring"]
---

# Get all critical assets

`GET /api/v2/security_monitoring/configuration/critical_assets`

Get the list of all critical assets.

## Response `200`

OK

- SecurityMonitoringCriticalAssetsResponse — Response object containing the available critical assets.
  - `data` SecurityMonitoringCriticalAsset[] — A list of critical assets objects.
    - `attributes` SecurityMonitoringCriticalAssetAttributes — The attributes of the critical asset.
      - `creation_author_id` integer — ID of user who created the critical asset.
      - `creation_date` integer — A Unix millisecond timestamp given the creation date of the critical asset.
      - `creator` SecurityMonitoringUser — A user.
        - `handle` string — The handle of the user.
        - `name` string, nullable — The name of the user.
      - `description` string — A description of the critical asset.
      - `enabled` boolean — Whether the critical asset is enabled.
      - `query` string — The query for the critical asset. It uses the same syntax as the queries to search signals in the Signals Explorer.
      - `rule_query` string — The rule query of the critical asset, with the same syntax as the search bar for detection rules. This determines which rules this critical asset will apply to.
      - `severity` 'info' | 'low' | 'medium' | 'high' | 'critical' | 'increase' | 'decrease' | 'no-op' — Severity associated with this critical asset. Either an explicit severity can be set, or the severity can be increased or decreased, or the severity can be left unchanged (no-op).
      - `tags` string[] — List of tags associated with the critical asset.
      - `update_author_id` integer — ID of user who updated the critical asset.
      - `update_date` integer — A Unix millisecond timestamp given the update date of the critical asset.
      - `updater` SecurityMonitoringUser — A user.
        - `handle` string — The handle of the user.
        - `name` string, nullable — The name of the user.
      - `version` integer — The version of the critical asset; it starts at 1, and is incremented at each update.
    - `id` string — The ID of the critical asset.
    - `type` 'critical_assets' — The type of the resource. The value should always be `critical_assets`.

## Other responses

- `403` — Not Authorized
- `429` — Too many requests

---

[API](https://skmtc.dev/datadog/apis/api-v2.md) · [All operations](https://skmtc.dev/datadog/apis/api-v2/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/datadog/api-v2/revisions/da68bf029e4c/schema)