stack kb security-endpoint-management-api endpoint-kill-process-action cli command
Auth required
elastic stack kb security-endpoint-management-api endpoint-kill-process-action \
--endpoint-ids <endpoint-ids> \
--parameters <parameters> \
[options]
Terminate a process
--endpoint-idsstring[]required- List of endpoint IDs (cannot contain empty strings). Max of 250.
--parametersstringrequired--agent-typestring- List of agent types to retrieve. Defaults to
endpoint. --alert-idsstring[]- If this action is associated with any alerts, they can be specified here. The action will be logged in any cases associated with the specified alerts. Max of 50.
--case-idsstring[]- The IDs of cases where the action taken will be logged. Max of 50.
--commentstring- Optional comment
--input-filestring- path to a JSON file to use as command input
-V--[no-]version- Print the Elastic CLI version
--config-filestring- path to a config file (default: ~/.elasticrc.yml)
--use-contextstring- override the active context from the config file
--command-profilestring- restrict available commands to a deployment profile (serverless, stack, default)
--[no-]json- output as JSON
--output-fieldsstring- comma-separated list of fields to include in output (dot-notation supported)
--output-templatestring- Mustache-like template for custom text output (e.g. "{{id}}: {{name}}")
--[no-]dry-run-
validate all inputs and exit without performing any action (preview changes without applying them)