stack kb security-detections-api set-attacks-assignees cli command
Auth required
elastic stack kb security-detections-api set-attacks-assignees \
--assignees <assignees> \
--ids <ids> \
[options]
Assign and unassign users from attack discovery alerts
Behaviour flags:
--dry-run — validate all inputs and exit without performing any action
--assigneesstringrequired--idsstring[]required-
Repeatable: pass
--idsmultiple times to supply more than one value --input-filestring- path to a JSON file to use as command input
--dry-run- validate all inputs and exit without performing any action (preview changes without applying them)
--json-
output as JSON