› › ›

Get action details

edit

Get action details

edit

Retrieves the details of an individual response action.

Request URL

edit

GET <kibana host>:<port>/api/endpoint/action/<action_id>

Example requests

edit

Retrieves an endpoint with an endpointID value of fr518850-681a-4y60-aa98-e22640cae2b8:

GET /api/endpoint/action/fr518850-681a-4y60-aa98-e22640cae2b8

Response code

edit

200: Indicates a successful call.

Example response

edit

{
    "data": {
        "id": "b3d6de74-36b0-4fa8-be46-c375bf1771bf",
        "agents": [
            "afdc366c-e2e0-4cdb-ae1d-94575bd2d8e0"
        ],
        "agentType": "endpoint",
        "command": "running-processes",
        "startedAt": "2022-08-08T15:24:57.402Z",
        "completedAt": "2022-08-08T09:50:47.672Z",
        "createdBy": "elastic",
        "isCompleted": true,
        "wasSuccessful": true,
        "isExpired": false,
        "outputs": {
            "afdc366c-e2e0-4cdb-ae1d-94575bd2d8e0": {
                "type": "json",
                "content": {
                    "entries": [
                        {
                            "pid": "822",
                            "entity_id": "fk2ym7bl3oiu3okjcik0xosc0i0m75x3eh49nu3uaqt4dqanjt",
                            "user": "Dexter",
                            "command": "/opt/cmd1"
                        },
                        {
                            "pid": "984",
                            "entity_id": "pwvz91m48wpj9j7ov9gtw8fp7u2rat4eu5ipte37hnhdcbi2pt",
                            "user": "Jada",
                            "command": "/opt/cmd3/opt/cmd3/opt/cmd3/opt/cmd3"
                        },
                    ]
                }
            }
        }
    }
}

« Blocklist List response actions »