---
title: "Get Event Enrichment rules"
method: GET
path: "/enrichment/event_enrichments/{id}/rules"
tags: ["Event Enrichments"]
---

# Get Event Enrichment rules

`GET /enrichment/event_enrichments/{id}/rules`

Event Enrichments allow you to automatically add contextual data to events as they're ingested, so that relevant information is available throughout the event, alert, and incident lifecycle. By leveraging the Contextual Data Platform (CDP), you can define rules that extract values from events or query enrichment schemas to populate event fields.

<!-- theme: warning -->

> ### Early Access
> This API is in Early Access and may change at any time. Contact your PagerDuty account team to request access.

Get the rules associated with an Event Enrichment.

## Path parameters

- `id` string, required

## Headers

- `Accept` string, required

## Response `200`

The Event Enrichment rules (orchestration path).

- object
  - `orchestration_path` EventEnrichmentOrchestrationPath — The rules configuration for an Event Enrichment, represented as an orchestration path.
    - `type` 'event_enrichment' — The type of this orchestration path.
    - `parent` EventEnrichmentReference — A reference to an Event Enrichment object.
      - `id` string — The ID of the Event Enrichment.
      - `type` 'event_enrichment_reference' — A string that determines the schema of the object.
      - `summary` string — A short-form, server-generated string that provides succinct, important information about an object suitable for primary labeling of an entity in a client. In many cases, this will be identical to `name`, though it is not intended to be an identifier.
      - `self` string, url — The API show URL at which the object is accessible.
    - `self` string, url — The API show URL at which the object is accessible.
    - `sets` object[] — An array of sets of rules. Must contain a set with id `start`.
      - `id` string — The ID of this set. The first set must have id `start`.
      - `rules` EventEnrichmentRule[] — The rules in this set.
        - `id` string — The ID of this rule.
        - `label` string — A description of this rule's purpose.
        - `conditions` object[] — Conditions that must be satisfied for this rule's actions to execute.
          - `expression` string — A PCL condition expression.
        - `actions` union — Actions to perform when the rule conditions are met. Must be one of `extractions` or `enrichments`.
          - object — Modify the event payload using regex-based extraction or template-based composition.
            - `extractions` object[], required — Modify the event payload using regex-based extraction or template-based composition. Maximum 25 extractions per rule.
              - …
          - object — Query a CDP enrichment schema using event values and write results back into the event payload.
            - `enrichments` object[], required — Query a CDP enrichment schema using event values and write results back into the event payload. Maximum 1 enrichment action per rule; maximum 5 enrichment actions applied per event per Event Enrichment.
              - …
        - `disabled` boolean — Indicates whether the rule is disabled and would therefore not be evaluated.
    - `created_at` string, date-time — The date/time the rules were created.
    - `created_by` object, nullable — Reference to the user that created the rules.
      - `id` string
      - `type` string
      - `self` string, url
    - `updated_at` string, date-time — The date/time the rules were last updated.
    - `updated_by` object, nullable — Reference to the user that last updated the rules.
      - `id` string
      - `type` string
      - `self` string, url
    - `version` string — Version of the rules configuration.

## Other responses

- `401` — Caller did not supply credentials or did not provide the correct credentials. If you are using an API key, it may be invalid or your Authorization header may be malformed.
- `403` — Caller is not authorized to view the requested resource. While your authentication is valid, the authenticated user or token does not have permission to perform this action.
- `404` — The requested resource was not found.
- `429` — Too many requests have been made, the rate limit has been reached.
- `500` — Internal Server Error the PagerDuty server experienced an error.

---

[API](https://skmtc.net/pagerduty/apis/rest-api.md) · [All operations](https://skmtc.net/pagerduty/apis/rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/pagerduty/rest-api/revisions/b679a8f3f02c/schema)