stack kb alerting get-alerting-rule-id-query-inspector cli command

elastic stack kb alerting get-alerting-rule-id-query-inspector \
  --id <id> \
  [options]
		

Get the Elasticsearch query for a rule

Behaviour flags:

--dry-run — validate all inputs and exit without performing any action

--id string required

The identifier for the rule.

--mode enum

The inspection mode. Use "build" to return only the query, or "execute" to run the query and include the response.

Values: build, execute

--alert-id string

The alert document ID. When provided, the query inspector uses the evaluation time range from the alert instead of the current time.

--input-file string

path to a JSON file to use as command input

--[no-]dry-run

validate all inputs and exit without performing any action (preview changes without applying them)

--[no-]json

output as JSON