---
title: "GET /api/fleet/artifacts/{id}/{sha2}"
method: GET
path: "/api/fleet/artifacts/{id}/{sha2}"
---

# GET /api/fleet/artifacts/{id}/{sha2}

`GET /api/fleet/artifacts/{id}/{sha2}`

The route to retrieve an artifact from Elasticsearch.

## Path parameters

- `id` string, required
- `sha2` string, required

## Headers

- `X-Request-Id` string
- `Elastic-Api-Version` string

## Response `200`

The artifact retrieved from ES.

## Other responses

- `400` — A 400 response for receiving an invalid User-Agent, Elastic-Api-Version header or version number (checkin and enroll endpoints). In the case where an invalid or unsupported Elastic-Api-Version header is requested, the response will contain the default version number. Or any other undefined error encounted by the fleet-server. May be returned by any endpoint except /api/fleet/status.
- `401` — 401 response when the API key is not enabled on any endpoint except /api/fleet/status. Or when there are issues updating an inactive agent on the ack endpoint.
- `404` — 404 response when the agent is not found. May be returned by checkin endpoint. or endpoints that use the agentApiKey auth scheme
- `408` — 408 request timeout.
- `428` — 428 rate limiting request. Only returned by artifacts endpoint.
- `500` — A 500 response for encountering not expected bahavior.
- `503` — 503 response when the server is not available for some reason. Such as if a context is cancelled or the connection (to ES) is refused. May be returned by any endpoint.

---

[API](https://skmtc.net/elastic/apis/fleet-server-api.md) · [All operations](https://skmtc.net/elastic/apis/fleet-server-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/elastic/fleet-server-api/versions/e1c8da877dd8/schema)