Get response actions status

Base URL: https://{kibana_url}

GET /api/endpoint/action_status
GET /s/{space_id}/api/endpoint/action_status

Auth

Get the status of response actions for the specified agent IDs.

Path parameters

space_id string optional: An identifier for the space. If space_id is not provided in the URL, the default space is used. Refer to Spaces for more information.

Query parameters

query object required

Response

application/json

body object required

View as Markdown

Base URL: https://{kibana_url}

Examples

Request Console 1 / 2 languages

Console Kibana Dev Tools

GET kbn:/api/endpoint/action_status?query=QUERY

Generated from the API spec

curl Shell

curl -X GET "${KIBANA_URL}/api/endpoint/action_status?query=${QUERY}" \
  -H "Authorization: ApiKey ${API_KEY}"

Generated from the API spec

Response

{
  "body": {
    "data": {
      "agent_id": "string",
      "pending_actions": {
        "execute": 0,
        "get-file": 0,
        "isolate": 0,
        "kill-process": 0,
        "running-processes": 0,
        "scan": 0,
        "suspend-process": 0,
        "unisolate": 0,
        "upload": 0
      }
    }
  }
}

Generated from the API spec