---
title: stack kb security-osquery-api osquery-get-live-query-results cli command
description: Get live query results Behaviour flags: --dry-run — validate all inputs and exit without performing any action 
url: https://docs-v3-preview.elastic.dev/elastic/cli/pull/573/cli/stack/kb/security-osquery-api/osquery-get-live-query-results
---

# stack kb security-osquery-api osquery-get-live-query-results cli command
<cli-modifiers>
</cli-modifiers>

```bash
elastic stack kb security-osquery-api osquery-get-live-query-results \
  --id <id> \
  --action-id <action-id> \
  [options]
```

Get live query results
**Behaviour flags:**
`--dry-run` — validate all inputs and exit without performing any action

## Options

<definitions>
  <definition term="--id string required">
    The ID of the live query.
  </definition>
  <definition term="--action-id string required">
    The ID of the query action.
  </definition>
  <definition term="--kuery string">
    A KQL search string to filter results.
  </definition>
  <definition term="--page string">
    The page number to return.
  </definition>
  <definition term="--page-size string">
    The number of results to return per page.
  </definition>
  <definition term="--sort string">
    The field to sort results by.
  </definition>
  <definition term="--sort-order enum">
    The sort order.
    **Values:** asc, desc
  </definition>
  <definition term="--input-file string">
    path to a JSON file to use as command input
  </definition>
  <definition term="--dry-run">
    validate all inputs and exit without performing any action (preview changes without applying them)
  </definition>
</definitions>


## Global Options

<definitions>
  <definition term="--json">
    output as JSON
  </definition>
</definitions>