Get exception item
editGet exception item
editRetrieves an exception item using its id
or item_id
field.
Request URL
editGET <kibana host>:<port>/api/exception_lists/items
URL query parameters
editThe URL query must include one of the following:
-
id
-GET /api/exception_lists/items?id=<id>
-
item_id
-GET /api/exception_lists/items?item_id=<item_id>
Example requests
editRetrieves the item with an item_id
of global-allow-processes
:
GET api/exception_lists/items?item_id=global-allow-processes
Response code
edit-
200
- Indicates a successful call.
Response payload
edit{ "_tags": [], "comments": [ { "comment": "Allowed on all hosts.", "created_at": "2020-07-14T13:40:39.804Z", "created_by": "elastic" } ], "created_at": "2020-07-14T13:40:39.804Z", "created_by": "elastic", "description": "Global process allowlist", "entries": [ { "field": "process.name", "operator": "included", "type": "match", "value": "housekeeping" } ], "id": "9b25aec0-c5d7-11ea-a3d8-a5b753aeeb9e", "item_id": "global-allow-processes", "list_id": "allowed-processes", "name": "Host-process global exclusion", "namespace_type": "single", "tags": [ "global", "hosts", "processes" ], "tie_breaker_id": "28c6b069-8e39-4f9a-b93c-95e5a15b46c5", "type": "simple", "updated_at": "2020-07-14T13:40:39.980Z", "updated_by": "elastic" }