---
title: "Get a hist signal's details"
method: GET
path: "/api/v2/siem-historical-detections/histsignals/{histsignal_id}"
tags: ["Security Monitoring"]
---

# Get a hist signal's details

`GET /api/v2/siem-historical-detections/histsignals/{histsignal_id}`

## Request

- Base URL: `https://api.datadoghq.com`
- URL: `https://api.datadoghq.com/api/v2/siem-historical-detections/histsignals/{histsignal_id}`
- Auth: one of:
  - API key in header `DD-API-KEY` and API key in header `DD-APPLICATION-KEY`
  - OAuth 2
    - Authorization code: `/oauth2/v1/authorize`
    - Token URL: `/oauth2/v1/token` scopes: `security_monitoring_signals_read`

Get a hist signal's details.

## Path parameters

- `histsignal_id` string, required

## Response `200`

OK

- SecurityMonitoringSignalResponse: Security Signal response data object.
  - `data` SecurityMonitoringSignal: Object description of a security signal.
    - `attributes` SecurityMonitoringSignalAttributes: The object containing all signal attributes and their associated values.
      - `custom` object: A JSON object of attributes in the security signal.
      - `message` string: The message in the security signal defined by the rule that generated the signal.
      - `tags` string[]: An array of tags associated with the security signal.
      - `timestamp` string, date-time: The timestamp of the security signal.
    - `id` string: The unique ID of the security signal.
    - `type` 'signal': The type of event.

## Other responses

- `400`: Bad Request
- `403`: Not Authorized
- `404`: Not Found
- `429`: Too many requests

---

[API](https://skmtc.dev/datadog/apis/api-v2.md) - [All operations](https://skmtc.dev/datadog/apis/api-v2/llms.txt) - [OpenAPI document](https://skmtc.dev/datadog/apis/api-v2/revisions/da68bf029e4c?raw)