Type to search.

Get value list items

Base URL
https://{kibana_url}
  • GET /api/lists/items/_find
  • GET /s/{space_id}/api/lists/items/_find
Auth

Get all value list items in the specified list.

Path parameters

space_id string optional

An identifier for the space. If space_id is not provided in the URL, the default space is used. Refer to Spaces for more information.

Query parameters

list_id string · format: nonempty · min length: 1 required

Parent value list's id to page through items for.

Example: 21b01cfb-058d-44b9-838c-282be16c91cd
page integer

The page number to return.

per_page integer

The number of list items to return per page.

sort_field string · format: nonempty · min length: 1

Determines which field is used to sort the results.

Example: value
sort_order enum

Determines the sort order, which can be desc or asc

Values: desc asc
cursor string · format: nonempty · min length: 1

Opaque cursor returned in a previous response; pass it to continue listing from the next page. Omit on the first request.

Example: WzIwLFsiYjU3Yzc2MmMtMzAzNi00NjVjLTliZmItN2JmYjVlNmU1MTVhIl1d
filter string

Filters the returned results according to the value of the specified field, using the

Example: value:127.0.0.1

Responses

Successful response

application/json
cursor string · format: nonempty · min length: 1 required

Returns the items that come after the last item returned in the previous call (use the cursor value returned in the previous call). This parameter uses the tie_breaker_id field to ensure all items are sorted and returned correctly.

data object[] required
_version string

The version id, normally returned by the API when the document is retrieved. Use it ensure updates are done against the latest version.

@timestamp string · format: date-time
created_at string · format: date-time required

Autogenerated date of object creation.

created_by string required

Autogenerated value - user that created object.

id string · format: nonempty · min length: 1 required

Value list item's identifier.

list_id string · format: nonempty · min length: 1 required

Value list's identifier.

meta object

Placeholder for metadata about the value list item.

tie_breaker_id string required

Field used in search to ensure all containers are sorted and returned correctly.

type enum required

Specifies the Elasticsearch data type of excludes the list container holds. Some common examples:

  • keyword: Many ECS fields are Elasticsearch keywords
  • ip: IP addresses
  • ip_range: Range of IP addresses (supports IPv4, IPv6, and CIDR notation)
Values: binary boolean byte date date_nanos date_range double double_range float float_range geo_point geo_shape
updated_at string · format: date-time required

Autogenerated date of last object update.

updated_by string required

Autogenerated value - user that last updated object.

value string · format: nonempty · min length: 1 required

The value used to evaluate exceptions.

page integer · min: 0 required
per_page integer · min: 0 required
total integer · min: 0 required