The SIEM app is now a part of the Elastic Security solution. Click here to view the current documentation.
IMPORTANT: No additional bug fixes or documentation updates will be released for this version.

› › ›

Tags endpoint

edit

Tags endpoint

edit

Aggregates and returns all rule tags.

Get tags

edit

Aggregates and returns all unique tags from all rules.

Request URL

edit

GET <kibana host>:<port>/api/detection_engine/tags

Example request

edit

Gets tags for all rules in the Kibana default space:

GET api/detection_engine/tags

Response code

edit

200: Indicates a successful call.

Example response

edit

[
  "zeek",
  "suricata",
  "windows",
  "linux",
  "network",
  "initial access",
  "remote access",
  "phishing"
]

« Index endpoint Import rules »