Terminate a process | Kibana Serverless API

Terminate a process Beta

POST /api/endpoint/action/kill_process

Terminate a running process on an endpoint.

application/json; Elastic-Api-Version=2023-10-31

Body Required

agent_type string

Values are endpoint, sentinel_one, or crowdstrike.
alert_ids array[string(nonempty)]

A string that does not contain only whitespace characters

At least 1 element. Minimum length of each is 1.
case_ids array[string]

Case IDs to be updated (cannot contain empty strings)

At least 1 element. Minimum length of each is 1.
comment string

Optional comment
endpoint_ids array[string] Required

List of endpoint IDs (cannot contain empty strings)

At least 1 element. Minimum length of each is 1.
parameters object Required
One of:
Security_Endpoint_Management_API_Pid object Security_Endpoint_Management_API_EntityId object object-3 object
Hide attribute Show attribute

pid integer

Minimum value is 1.
Hide attribute Show attribute

entity_id string

Minimum length is 1.
Hide attribute Show attribute

process_name string

Valid for SentinelOne agent type only

Minimum length is 1.

Responses

200 application/json; Elastic-Api-Version=2023-10-31

OK

Additional properties are allowed.

POST /api/endpoint/action/kill_process

curl \
 -X POST https://<KIBANA_URL>/api/endpoint/action/kill_process \
 -H "Content-Type: application/json; Elastic-Api-Version=2023-10-31"

Request examples

{
  "agent_type": "endpoint",
  "alert_ids": [
    "string"
  ],
  "case_ids": [
    "string"
  ],
  "comment": "string",
  "endpoint_ids": [
    "string"
  ],
  "parameters": {
    "pid": 42
  }
}

Response examples (200)

{}

Terminate a process Beta

Body Required

parameters object Required

Responses