Get a policy response

Base URL: https://{kibana_url}

GET /api/endpoint/policy_response
GET /s/{space_id}/api/endpoint/policy_response

Auth

Get the most recent policy response for an endpoint.

Path parameters

space_id string optional: An identifier for the space. If space_id is not provided in the URL, the default space is used. Refer to Spaces for more information.

Query parameters

agentId string · max length: 256 required: The agent ID to retrieve the policy response for.

Response

Indicates a successful call.

application/json

Response Type: object

View as Markdown

Base URL: https://{kibana_url}

Examples

Request Console 1 / 2 languages

Console Kibana Dev Tools

GET kbn:/api/endpoint/policy_response?agentId=AGENT_ID

Generated from the API spec

curl Shell

curl -X GET "${KIBANA_URL}/api/endpoint/policy_response?agentId=${AGENT_ID}" \
  -H "Authorization: ApiKey ${API_KEY}"

Generated from the API spec

Response

{
  "policy_response": {
    "@timestamp": "2023-07-04T15:48:57.360Z",
    "agent": {
      "id": "ed518850-681a-4d60-bb98-e22640cae2a8",
      "version": "7.16.0"
    },
    "Endpoint": {
      "policy": {
        "applied": {
          "endpoint_policy_version": "2",
          "id": "d5371dcd-93b7-4627-af88-4084f7d6aa3e",
          "name": "My endpoint policy",
          "status": "success",
          "version": "3"
        }
      }
    }
  }
}