Body Required
-
agent_type string
The host agent type (optional). Defaults to endpoint.
Values are
endpoint
,sentinel_one
,crowdstrike
, ormicrosoft_defender_endpoint
. -
alert_ids array[string(nonempty)]
A list of alerts
id
s.At least
1
element. Minimum length of each is1
. -
case_ids array[string]
Case IDs to be updated (cannot contain empty strings)
At least
1
element. Minimum length of each is1
. -
comment string
Optional comment
-
List of endpoint IDs (cannot contain empty strings)
At least
1
element. Minimum length of each is1
. -
Additional properties are allowed.
POST
/api/endpoint/action/get_file
curl \
--request POST https://localhost:5601/api/endpoint/action/get_file \
--header "Content-Type: application/json" \
--data '{"agent_type":"endpoint","alert_ids":["string"],"case_ids":["string"],"comment":"string","endpoint_ids":["string"],"parameters":{"path":"string"}}'
Request examples
{
"agent_type": "endpoint",
"alert_ids": [
"string"
],
"case_ids": [
"string"
],
"comment": "string",
"endpoint_ids": [
"string"
],
"parameters": {
"path": "string"
}
}
Response examples (200)
{}