Get response actions status

Base URL: https://{kibana_url}

GET /api/endpoint/action_status
GET /s/{space_id}/api/endpoint/action_status

Auth

Get the status of response actions for the specified agent IDs.

Path parameters

space_id string optional: An identifier for the space. If space_id is not provided in the URL, the default space is used. Refer to Spaces for more information.

Query parameters

agent_ids union string[] | string · min length: 1 required: A list of agent IDs to get the action status for.; Example: ["agent-id-1","agent-id-2"]

Response

Indicates a successful call.

application/json

data object[] required: One pending-actions summary entry per requested agent.

View as Markdown

Base URL: https://{kibana_url}

Examples

Request Console 1 / 2 languages

Console Kibana Dev Tools

GET kbn:/api/endpoint/action_status?agent_ids=agent-id-1&agent_ids=agent-id-2

Generated from the API spec

curl Shell

curl -X GET "${KIBANA_URL}/api/endpoint/action_status?agent_ids=agent-id-1&agent_ids=agent-id-2" \
  -H "Authorization: ApiKey ${API_KEY}"

Generated from the API spec

Response

{
  "data": [
    {
      "agent_id": "afdc366c-e2e0-4cdb-ae1d-94575bd2d8e0",
      "pending_actions": {
        "execute": 0,
        "get-file": 0,
        "isolate": 0,
        "kill-process": 1,
        "running-processes": 0,
        "scan": 0,
        "unisolate": 0,
        "upload": 0
      }
    }
  ]
}