---
title: "Get file information"
method: GET
path: "/api/endpoint/action/{action_id}/file/{file_id}"
tags: ["Security Endpoint Management API"]
---

# Get file information

`GET /api/endpoint/action/{action_id}/file/{file_id}`

## Request

- Base URL: `https://localhost:5601`
- URL: `https://localhost:5601/api/endpoint/action/{action_id}/file/{file_id}`
- Auth: one of:
  - API key in header `Authorization`
  - HTTP basic

**Spaces method and path for this operation:**

<div><span class="operation-verb get">get</span>&nbsp;<span class="operation-path">/s/{space_id}/api/endpoint/action/{action_id}/file/{file_id}</span></div>

Refer to [Spaces](https://www.elastic.co/docs/deploy-manage/manage-spaces) for more information.

Get information for the specified response action file download.

## Path parameters

- `action_id` string, required
- `file_id` string, required

## Response `200`

Indicates a successful call.

- object
  - `data` object
    - `actionId` string: The response action ID.
    - `agentId` string: The agent ID that generated the file.
    - `agentType` string: The type of agent that generated the file.
    - `created` string, date-time: The date and time the file was created.
    - `id` string: The unique file identifier.
    - `mimeType` string: The MIME type of the file.
    - `name` string: The file name.
    - `size` number: The file size in bytes.
    - `status` 'AWAITING_UPLOAD' | 'UPLOADING' | 'READY' | 'UPLOAD_ERROR' | 'DELETED': The file upload status.

## Changes

> 266 revisions in range; 110 not diffed.

- **2026-07-21** `804740fca560`: 2 breaking, 2 warning
  - for the `path` request parameter `action_id`, the minLength was increased from `0` to `1`
  - for the `path` request parameter `file_id`, the minLength was increased from `0` to `1`
  - for the `path` request parameter `action_id`, the maxLength was set to `256`
  - for the `path` request parameter `file_id`, the maxLength was set to `256`

[Operation history](https://skmtc.dev/elastic/apis/kibana-apis/changes/api/endpoint/action/:action_id/file/:file_id/get.md)

---

[API](https://skmtc.dev/elastic/apis/kibana-apis.md) - [All operations](https://skmtc.dev/elastic/apis/kibana-apis/llms.txt) - [OpenAPI document](https://skmtc.dev/elastic/apis/kibana-apis/revisions/b87131d80c52?raw)