stack kb significantevents put-streams-name-queries-queryid cli command

elastic stack kb significantevents put-streams-name-queries-queryid \
  --name <name> \
  --query-id <query-id> \
  --esql <esql> \
  --title <title> \
  [options]
		

Upsert a query to a stream

Behaviour flags:

--dry-run — validate all inputs and exit without performing any action

--name string required

The name of the stream.

--query-id string required

The identifier of the query.

--esql string required

--title string required

A non-empty string.

--description string

--evidence string[]

--expires-at string

--severity-score number

--input-file string

path to a JSON file to use as command input

--dry-run

validate all inputs and exit without performing any action (preview changes without applying them)

--json

output as JSON