People

Get a tracked user

The full record of a single tracked end user.

Required scope users:read

get/users/{id}

Authorizations

Authorizationstringrequired

Authorization header carrying a workspace API key, as “Bearer kbn_live_…”. The X-Api-Key header is accepted equivalently.

Path parameters

idstring<uuid>required

Identifier of the tracked user.

Response200 · application/json

The tracked user record.

userIdstring<uuid>required

Identifier of the tracked user.

userRealNamestring | null

Display name of the user.

userAccountstring | null

Account the user signs in with.

hostnamestringrequired

Workstation the user was last seen on.

lastSeenstring<date-time>

Last time telemetry was received for this user.

workstationIdstring<uuid>

Workstation the user is attached to.

healthstring | null

Health of that workstation.

osNamestring | null

Operating system of that workstation.

osVersionstring | null

Version of that operating system.