stack kb security-entity-analytics-api get-risk-score-history cli command

elastic stack kb security-entity-analytics-api get-risk-score-history \
  --entity-type <entity-type> \
  --entity-id <entity-id> \
  [options]
		

Get risk score history for an entity

Behaviour flags:

--dry-run — validate all inputs and exit without performing any action

--entity-type enum required

The type of entity to retrieve history for.

Values: host, user, service, generic

--entity-id string required

The identifier of the entity to retrieve history for.

--from string

Start of the time range, in date-math syntax. Defaults to 90 days ago.

--to string

End of the time range, in date-math syntax. Defaults to now.

--score-type enum

Filter entries by the type of score recorded (base, propagated, or resolution).

Values: base, propagated, resolution

--include-contributions

When true, each entry also includes the contributions recorded for that scoring run (inputs, modifiers, category 2 fields, and criticality_level), when present on the underlying document.

--input-file string

path to a JSON file to use as command input

--dry-run

validate all inputs and exit without performing any action (preview changes without applying them)

--json

output as JSON