IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.

› › ›

Get action details

edit

IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Get action details

edit

Retrieves the details of an individual response action.

Request URL

edit

GET <kibana host>:<port>/api/endpoint/action/<action_id>

Example requests

edit

Retrieves an endpoint with an endpointID value of fr518850-681a-4y60-aa98-e22640cae2b8:

GET /api/endpoint/action/fr518850-681a-4y60-aa98-e22640cae2b8

Response code

edit

200: Indicates a successful call.

Example response

edit

{
    "data": {
        "id": "b3d6de74-36b0-4fa8-be46-c375bf1771bf",
        "agents": [
            "afdc366c-e2e0-4cdb-ae1d-94575bd2d8e0"
        ],
        "command": "running-processes",
        "startedAt": "2022-08-08T15:24:57.402Z",
        "completedAt": "2022-08-08T09:50:47.672Z",
        "createdBy": "elastic",
        "isCompleted": true,
        "wasSuccessful": true,
        "isExpired": false,
        "outputs": {
            "afdc366c-e2e0-4cdb-ae1d-94575bd2d8e0": {
                "type": "json",
                "content": {
                    "entries": [
                        {
                            "pid": "822",
                            "entity_id": "fk2ym7bl3oiu3okjcik0xosc0i0m75x3eh49nu3uaqt4dqanjt",
                            "user": "Dexter",
                            "command": "/opt/cmd1"
                        },
                        {
                            "pid": "984",
                            "entity_id": "pwvz91m48wpj9j7ov9gtw8fp7u2rat4eu5ipte37hnhdcbi2pt",
                            "user": "Jada",
                            "command": "/opt/cmd3/opt/cmd3/opt/cmd3/opt/cmd3"
                        },
                    ]
                }
            }
        }
    }
}

« Blocklist List response actions »