⚠️ Android only.

Returns the firing history for a specific alarm rule identified by its UUID alarm_id. Each record in the response represents an instance when the rule's conditions were met, identifying the device that triggered the alert, the group it belongs to, and the timestamps for when the alert fired and when the condition was last observed.

Response fields of note

device_name — Name of the device that triggered the alert

device_id — UUID of the device that triggered the alert

group_id — Array of group UUIDs the triggering device belongs to

group_name — Name of the group the triggering device belongs to

alert_time — Timestamp of when the alert fired

latest_seen — Timestamp of when the triggering condition was last observed on the device

Common use cases

Investigating which specific devices triggered an alarm rule and when, to support troubleshooting or incident response

Auditing alert activity before deleting an alarm rule to preserve a record of its history

Assessing whether a rule is firing too frequently or on unexpected devices, to inform threshold tuning

Generating compliance or operational reports on device health events over time

Best practices

Review this endpoint before deleting an alarm rule — firing history is not recoverable after the rule is deleted

Cross-reference device_id values with GET /enterprise/{enterprise_id}/device/{device_id}/ to retrieve full device context for triggered alerts

alarm_id is a UUID — use GET /alarmrules/ with the name filter to look it up if it is not already known