Enable Attack Discovery schedule

Base URL: https://{kibana_url}

POST /api/attack_discovery/schedules/{id}/_enable

Auth

Enables a previously disabled Attack Discovery schedule, allowing it to run according to its configured interval. Once enabled, the schedule will begin executing at the next scheduled time based on its interval configuration.

Path parameters

id string · format: nonempty · min length: 1 required: The unique identifier (UUID) of the Attack Discovery schedule to enable. This ID is returned when creating a schedule and can be found in schedule listings.; Example: 12345678-1234-1234-1234-123456789012

Responses

Successfully enabled Attack Discovery schedule, returning the schedule ID for confirmation

application/json

id string · format: nonempty · min length: 1 required: A string that does not contain only whitespace characters.

Bad Request response.

application/json

View as Markdown

Base URL: https://{kibana_url}

Examples

Request curl 1 / 1 language

curl Shell

curl \
 --request POST 'http://localhost:5601/api/attack_discovery/schedules/12345678-1234-1234-1234-123456789012/_enable' \
 --header "Authorization: $API_KEY" \
 --header "Content-Type: application/json"

Response

{
  "id": "12345678-1234-1234-1234-123456789012"
}

{
  "error": "Bad Request",
  "message": "Invalid request parameters.",
  "status_code": 400
}