Query parameters

• query object Required

  Additional properties are allowed.

  Hide query attributes Show query attributes object

  • agentIds array[string] | string

    One of:

    array-1 array[string] string-2 string

    At least 1 but not more than 50 elements. Minimum length of each is 1.

    Minimum length is 1.

  • agentTypes string

    Values are endpoint, sentinel_one, or crowdstrike.

  • commands array[string]

    The command to be executed (cannot be an empty string)

    Minimum length of each is 1. Values are isolate, unisolate, kill-process, suspend-process, running-processes, get-file, execute, upload, or scan.

  • endDate string

    End date

  • page integer

    Page number

    Minimum value is 1. Default value is 1.

  • pageSize integer

    Number of items per page

    Minimum value is 1, maximum value is 10000. Default value is 10.

  • startDate string

    Start date

  • types array[string]

    Type of response action

    Values are automated or manual.

  • userIds array[string] | string

    User IDs

    One of:

    array-1 array[string] string-2 string

    At least 1 element. Minimum length of each is 1.

    Minimum length is 1.

  • withOutputs array[string] | string

    Shows detailed outputs for an action response

    One of:

    array-1 array[string] string-2 string

    At least 1 element. Minimum length of each is 1.

    Minimum length is 1.

Responses

• 200 application/json; Elastic-Api-Version=2023-10-31

  OK

  Additional properties are allowed.