---
title: "Fetch a list of Issues"
method: GET
path: "/devices/{deviceId}/issues"
---

# Fetch a list of Issues

`GET /devices/{deviceId}/issues`

## Path parameters

- `deviceId` string, required

## Query parameters

- `cursor` string
- `per_page` integer
- `search` string

## Response `200`

A paged array of Issues

- object
  - `page` integer — current page of data, as specified by the 'page' request parameter. This page number is 0-indexed.
  - `last_page` integer — the final page number for the dataset. This is zero-indexed, so that a dataset with a record count less than or equal to the page size will be 0.
  - `data` Issue[] — Details about the Issues
    - `id` string — The canonical identifier for this Issue
    - `check_id` string — The canonical identifier of the check this Issue is for
    - `issue_key` string — The name of the primary key that distinguishes one Issue from another in the context of a single Issue definition. May not be applicable
    - `issue_value` string — The primary value of the Issue. May not be applicable
    - `title` string — The short description of the Issue
    - `value` object — The information that defines this Issue
    - `ignored` boolean — Whether this Issue has been ignored. Ignoring Issues is useful to allowlist single instances of issues when they are determined to be false positives or acceptable risk.
    - `escalation_status` string — Describes the escalation status of this Issue. An issue may be escalated because user contact attempts were exhausted, the user asked for help, or because the Device generating the Issue does not have a device owner
    - `resolved_at` string, date-time — The timestamp when this Issue was resolved. Will be null if the Issue is open.
    - `timestamp` string, date-time — When the Issue was initially detected
    - `first_notified_owner_at` string, date-time — The timestamp the owner of the Device was first notified. Can be null if no notification has been triggered
    - `grace_period_expiration` string, date-time — A timestamp describing the time after which the Issue is eligible for end-user notifications. This value depends on the notification grace period configuration of the Issue's Check.
    - `device` object — The Device that this Issue originated from
      - `id` string — The canonical identifier for this device
      - `name` string — The canonical human name for the device. May be edited via the web interface.
      - `owned_by` string — The owner of the device (either: 'user' or 'organization')
      - `privacy` string — The administrator's visibility into the details of the device (either: 'details_visible' or 'details_hidden')
      - `platform` string — The basic operating system platform of the device
      - `enrolled_at` string, date-time — The timestamp that the device was first enrolled into K2
      - `last_seen_at` string, date-time — The timestamp representing when the device last checked in to Kolide
      - `operating_system` string — The operating system installed on the device
      - `issue_count` integer — The number of currently unresolved issues for the device
      - `resolved_issue_count` integer — The number of issues for the device that have been resolved
      - `failure_count` integer — The number of currently unresolved issues for the device (DEPRECATED use issue_count instead)
      - `resolved_failure_count` integer — The number of issues for the device that have been resolved (DEPRECATED use resolved_issue_count instead)
      - `primary_user_name` string — The name of the device's main user account, as measured by number of logins. This field is now deprecated
      - `hardware_model` string — The specific hardware model of the device
      - `hardware_vendor` string — The manufacturer of the device
      - `launcher_version` string — The version of the kolide launcher agent running on the device
      - `osquery_version` string — The version of osquery running on the device
      - `serial` string — The hardware serial of the device. May not be applicable
      - `hardware_uuid` string — The hardware UUID/UDID for the device. May not be applicable for some devices
      - `assigned_owner` object — The person assigned to this device
        - `id` string — The canonical identifier for this device owner
        - `owner_type` string — Describes the type for this device owner. Either 'Person' or 'Device Group'
        - `name` string — The human-readable reference name
        - `email` string — The email associated with the device owner. Blank if 'owner_type' is not 'Person'
      - `kolide_mdm` string — This field is no longer used and will return nil.
      - `note` string — Notes provided by a Kolide administrator (in markdown)
      - `note_html` string — Notes provided by a Kolide administrator (in HTML format)
      - `operating_system_details` object — Details about the device's operating system
        - `device_id` string — The identifier for the device
        - `platform` string — The underlying OS platform
        - `name` string — The high-level name of the operating system
        - `codename` string — The code name for the operating system, may not be applicable to all operating systems
        - `version` string — The full version of the operating system
        - `build` string — The build number of the operating system, may not be applicable to all operating systems
        - `major_version` string — The major version of the operating system, may not be applicable to all operating systems
        - `minor_version` string — The minor version of the operating system, may not be applicable to all operating systems
        - `patch_version` string — The patch version of the operating system, may not be applicable to all operating systems
        - `ubr` string — The UBR (UpdateBuildRevision) number, only applicable for Windows
        - `release_id` string — The OS Release ID, only applicable for Windows
      - `remote_ip` string — The IP address the device last checked in with
      - `location` string — This field is no longer used and will return nil.
      - `product_image_url` string — The URL of the device's product image
    - `check` object — The Check this Issue is for
      - `id` string — The canonical identifier for this Check
      - `failing_device_count` integer — The number of devices in your organization failing the Check
      - `display_name` string — The display name of the Check
      - `name` string — The name of the Check. DEPRECATED (Use `display_name` instead)
      - `description` string — A description of the purpose and rationale of the Check
      - `compatibility` integer[] — Operating system platforms that this Check is compatible with
      - `topics` integer[] — A list of Kolide-set topics associated with the Check
      - `tags` integer[] — A list of Team-set tag names associated with the check. DEPRECATED: use check_tags attribute instead for more complete tag information
      - `check_tags` integer[] — A list of Team-set tags associated with the Check
      - `notification_strategy` string — Describes how notifications are handled when an issue occurs for the Check
      - `notification_grace_period` integer — The number of days a user is given to resolve Issues with this Check before they are notified. The time period starts when the Issue is detected by Kolide. This field is only relevant if the Check is configured to notify end users.

## Other responses

- `403` — An 'unauthorized' response may occur for features restricted by or unavailable to your organization

---

[API](https://skmtc.net/kolide/apis/k2-api.md) · [All operations](https://skmtc.net/kolide/apis/k2-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/kolide/k2-api/versions/7013d788398e/schema)