stack kb security-timeline-api persist-pinned-event-route cli command
Auth required
elastic stack kb security-timeline-api persist-pinned-event-route \
--event-id <event-id> \
--timeline-id <timeline-id> \
[options]
Pin/unpin an event
--event-idstringrequired- The
_idof the associated event for this pinned event. --timeline-idstringrequired- The
savedObjectIdof the timeline that you want this pinned event unpinned from. --pinned-event-idstring- The
savedObjectIdof the pinned event you want to unpin.
--input-filestring- path to a JSON file to use as command input
-V--[no-]version- Print the Elastic CLI version
--config-filestring- path to a config file (default: ~/.elasticrc.yml)
--use-contextstring- override the active context from the config file
--command-profilestring- restrict available commands to a deployment profile (serverless, stack, default)
--[no-]json- output as JSON
--output-fieldsstring- comma-separated list of fields to include in output (dot-notation supported)
--output-templatestring- Mustache-like template for custom text output (e.g. "{{id}}: {{name}}")
--[no-]dry-run-
validate all inputs and exit without performing any action (preview changes without applying them)