stack kb security-entity-analytics-api create-watchlist cli command

Auth required

		elastic stack kb security-entity-analytics-api create-watchlist \
  --name <name> \
  --risk-modifier <risk-modifier> \
  [options]
		
	

Create a new watchlist

Behaviour flags:

--dry-run — validate all inputs and exit without performing any action

Options

--name string required: Unique name for the watchlist
--risk-modifier number required: Risk score modifier associated with the watchlist
--description string: Description of the watchlist
--entity-sources string[]: Optional entity sources to create and link to the watchlist
--[no-]managed: Indicates if the watchlist is managed by the system
--input-file string: path to a JSON file to use as command input
--[no-]dry-run: validate all inputs and exit without performing any action (preview changes without applying them)