stack kb security-detections-api search-alerts cli command
Auth required
elastic stack kb security-detections-api search-alerts [options]
Find and/or aggregate detection alerts
Behaviour flags:
--dry-run — validate all inputs and exit without performing any action
--sourcestring--aggsstring--fieldsstring[]--querystring--runtime-mappingsstring--sizenumber--sortstring--[no-]track-total-hits--input-filestring- path to a JSON file to use as command input
--[no-]dry-run- validate all inputs and exit without performing any action (preview changes without applying them)
--[no-]json-
output as JSON