Body Required
-
agent_type string
Values are
endpoint
,sentinel_one
, orcrowdstrike
. -
alert_ids array[string(nonempty)]
A string that does not contain only whitespace characters
At least
1
element. Minimum length of each is1
. -
case_ids array[string]
Case IDs to be updated (cannot contain empty strings)
At least
1
element. Minimum length of each is1
. -
comment string
Optional comment
-
List of endpoint IDs (cannot contain empty strings)
At least
1
element. Minimum length of each is1
. -
Additional properties are allowed.
POST
/api/endpoint/action/execute
curl \
-X POST https://<KIBANA_URL>/api/endpoint/action/execute \
-H "Content-Type: application/json; Elastic-Api-Version=2023-10-31"
Request examples
{
"agent_type": "endpoint",
"alert_ids": [
"string"
],
"case_ids": [
"string"
],
"comment": "string",
"endpoint_ids": [
"string"
],
"parameters": {
"command": "isolate",
"timeout": 42
}
}
Response examples (200)
{}