> ## Documentation Index
> Fetch the complete documentation index at: https://docs.insightsecure.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Fetch Device History

> Full session and correlation history for one device

<ParamField header="Authorization" type="string" required>
  `Bearer {public_api_key}` — see [Authentication](/api-reference/authentication).
</ParamField>

<ParamField path="device_id" type="string" required>
  The device identifier from any prior telemetry event or alert.
</ParamField>

### Response

<ResponseField name="device_id" type="string" />

<ResponseField name="first_seen_at" type="string" />

<ResponseField name="last_seen_at" type="string" />

<ResponseField name="peak_rasp_score" type="integer">Highest score seen across all sessions for this device.</ResponseField>

<ResponseField name="users_seen_on" type="string[]">
  Every user/account ID this device has been associated with — the device-to-user graph view for a single device. See [Beyond RASP](/device-intelligence/beyond-rasp#device-to-user-graph-mapping).
</ResponseField>

<ResponseField name="sessions" type="array">Session summaries, most recent first.</ResponseField>

```json Example response theme={null}
{
  "device_id": "d_4OwdmtpInKd9fW1fMBSAHN",
  "first_seen_at": "2025-11-02T08:11:00.000Z",
  "last_seen_at": "2025-12-15T10:20:30.000Z",
  "peak_rasp_score": 82,
  "users_seen_on": ["u_123", "u_881", "u_442"],
  "sessions": [
    { "session_id": "SESS-1765265709938-uuuc7n", "rasp_action": "BLOCK", "started_at": "2025-12-15T10:19:50.000Z" }
  ]
}
```
