---
title: "Get recent Security Compass events"
method: POST
path: "/api/v2/securityCompass/getSyncHistory"
tags: ["Security Compass"]
---

# Get recent Security Compass events

`POST /api/v2/securityCompass/getSyncHistory`

## Request

- Base URL: `https://zeropath.com`
- URL: `https://zeropath.com/api/v2/securityCompass/getSyncHistory`
- Auth: API key in header `X-ZeroPath-API-Token-Id` and API key in header `X-ZeroPath-API-Token-Secret`

Requires INSTALLATION_VIEW. Read recent Security Compass audit-log events for the organization — rule syncs, findings pushes, mapping additions/removals, integration changes, and connection tests — newest first.

## Request body

- SecurityCompassGetSyncHistoryRequest
  - `organizationId` string, required: Organization whose Security Compass audit-log events to read.
  - `limit` integer: Maximum number of events to return.

## Response `200`

Recent events, newest first

- SecurityCompassSyncHistoryEntry[]
  - `id` string, required
  - `apiEndpointName` string, required: Event kind, e.g. security_compass.rule_sync, security_compass.mapping_add, security_compass.test_connection.
  - `apiEndpointArguments` unknown
  - `message` string, nullable
  - `level` string, required: Log level, e.g. INFO, WARN, ERROR.
  - `source` string, required: Auth source that performed the action.
  - `createdAt` string, date-time, required
  - `caller` object, nullable: User who performed the action; null for token- or system-initiated events.
    - `id` string, required
    - `fName` string, nullable
    - `lName` string, nullable
    - `email` string, required

## Other responses

- `400`: Error Response
- `401`: Error Response
- `404`: Error Response
- `409`: Error Response

---

[API](https://skmtc.dev/zeropath/apis/zeropath-api.md) - [All operations](https://skmtc.dev/zeropath/apis/zeropath-api/llms.txt) - [OpenAPI document](https://skmtc.dev/zeropath/apis/zeropath-api/revisions/126e9c80ba0d?raw)