---
title: "Get a finding"
method: GET
path: "/api/v2/posture_management/findings/{finding_id}"
tags: ["Security Monitoring"]
---

# Get a finding

`GET /api/v2/posture_management/findings/{finding_id}`

## Request

- Base URL: `https://api.datadoghq.com`
- URL: `https://api.datadoghq.com/api/v2/posture_management/findings/{finding_id}`
- Auth: one of:
  - API key in header `DD-API-KEY` and API key in header `DD-APPLICATION-KEY`
  - OAuth 2
    - Authorization code: `/oauth2/v1/authorize`
    - Token URL: `/oauth2/v1/token` scopes: `security_monitoring_findings_read`

Returns a single finding with message and resource configuration.

## Path parameters

- `finding_id` string, required

## Query parameters

- `snapshot_timestamp` integer

## Response `200`

OK

- GetFindingResponse: The expected response schema when getting a finding.
  - `data` DetailedFinding, required: A single finding with with message and resource configuration.
    - `attributes` DetailedFindingAttributes: The JSON:API attributes of the detailed finding.
      - `evaluation` 'pass' | 'fail': The evaluation of the finding.
      - `evaluation_changed_at` integer: The date on which the evaluation for this finding changed (Unix ms).
      - `message` string: The remediation message for this finding.
      - `mute` FindingMute: Information about the mute status of this finding.
        - `description` string: Additional information about the reason why this finding is muted or unmuted.
        - `expiration_date` integer: The expiration date of the mute or unmute action (Unix ms).
        - `muted` boolean: Whether this finding is muted or unmuted.
        - `reason` 'PENDING_FIX' | 'FALSE_POSITIVE' | 'ACCEPTED_RISK' | 'NO_PENDING_FIX' | 'HUMAN_ERROR' | 'NO_LONGER_ACCEPTED_RISK' | 'OTHER': The reason why this finding is muted or unmuted.
        - `start_date` integer: The start of the mute period.
        - `uuid` string: The ID of the user who muted or unmuted this finding.
      - `resource` string: The resource name of this finding.
      - `resource_configuration` object: The resource configuration for this finding.
      - `resource_discovery_date` integer: The date on which the resource was discovered (Unix ms).
      - `resource_type` string: The resource type of this finding.
      - `rule` FindingRule: The rule that triggered this finding.
        - `id` string: The ID of the rule that triggered this finding.
        - `name` string: The name of the rule that triggered this finding.
      - `status` 'critical' | 'high' | 'medium' | 'low' | 'info': The status of the finding.
      - `tags` string[]: The tags associated with this finding.
    - `id` string: The unique ID for this finding.
    - `type` 'detailed_finding': The JSON:API type for findings that have the message and resource configuration.

## Other responses

- `400`: Bad Request: The server cannot process the request due to invalid syntax in the request.
- `403`: Forbidden: Access denied
- `404`: Not Found: The requested finding cannot be found.
- `429`: Too many requests: The rate limit set by the API has been exceeded.

---

[API](https://skmtc.dev/datadog/apis/datadog-api-v2-collection.md) - [All operations](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/llms.txt) - [OpenAPI document](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/revisions/da68bf029e4c?raw)