---
title: "Get windows event condition"
method: GET
path: "/v2/policies/{policy_id}/condition/windows-event/{condition_id}"
tags: ["management"]
---

# Get windows event condition

`GET /v2/policies/{policy_id}/condition/windows-event/{condition_id}`

Get specified windows event condition for specified policy

## Path parameters

- `policy_id` integer, required
- `condition_id` string, uuid, required

## Response `default`

default response

- object — Windows event policy condition response payload
  - `id` string — Policy condition id
  - `conditionName` string — Policy condition name
  - `displayName` string — Policy condition display name
  - `enabled` boolean — Policy condition enabled
  - `severity` 'NONE' | 'MINOR' | 'MODERATE' | 'MAJOR' | 'CRITICAL' — Policy condition severity
  - `priority` 'NONE' | 'LOW' | 'MEDIUM' | 'HIGH' — Policy condition priority
  - `channels` integer[] — Policy condition notification channels
  - `scripts` object[] — Policy condition scripts
    - `scriptId` integer — Policy condition script id
    - `runAs` 'SYSTEM' | 'LOGGED_ON_USER' | 'LOCAL_ADMIN' | 'DOMAIN_ADMIN' | 'PREFERRED_CREDENTIAL_MAC' | 'PREFERRED_CREDENTIAL_LINUX' — Policy condition script runAs
    - `scriptParam` string — Policy condition script parameter
    - `scriptVariables` object[] — Policy condition script variables
      - `id` string — Policy condition script variable Id
      - `value` string — Policy condition script variable value
  - `notificationAction` 'NONE' | 'SEND' — Policy condition notification action
  - `notifyOnReset` boolean — Policy condition notify on reset
  - `resetThreshold` integer — Policy condition reset threshold (seconds)
  - `inheritance` object — Policy condition inheritance status
    - `inherited` boolean — Is policy condition inherited
    - `overridden` boolean — Is policy condition overridden
    - `sourcePolicyId` integer — Parent policy Id
  - `source` string — Event Source
  - `eventIds` integer[] — Event IDs
  - `text` object — Windows event policy condition text
    - `values` string[] — Text values
    - `condition` 'CONTAINS' | 'NOT_CONTAINS' — Text condition
    - `include` 'ALL' | 'ANY' — Text include
  - `occurrence` object — Windows event policy condition occurrence
    - `enabled` boolean — Occurrence enabled
    - `threshold` integer — Occurrence threshold
    - `duration` integer — Occurrence duration

---

[API](https://skmtc.net/ninjarmm/apis/ninjaone-public-api-2-0.md) · [All operations](https://skmtc.net/ninjarmm/apis/ninjaone-public-api-2-0/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/ninjarmm/ninjaone-public-api-2-0/revisions/753f26d46650/schema)