---
title: stack kb security-attack-discovery-api get-attack-discovery-generation cli command
description: Get a single Attack Discovery generation, including its discoveries and (optional) generation metadata Behaviour flags: --dry-run — validate all inputs...
url: https://www.elastic.co/elastic/docs-builder/docs/4083/reference/elastic-cli/cli/stack/kb/security-attack-discovery-api/get-attack-discovery-generation
applies_to:
  - Elastic Cloud Serverless: Preview
  - Elastic Stack: Preview
---

# stack kb security-attack-discovery-api get-attack-discovery-generation cli command
<cli-modifiers>
</cli-modifiers>

```bash
elastic stack kb security-attack-discovery-api get-attack-discovery-generation \
  --execution-uuid <execution-uuid> \
  [options]
```

Get a single Attack Discovery generation, including its discoveries and (optional) generation metadata
**Behaviour flags:**
`--dry-run` — validate all inputs and exit without performing any action

## Options

<definitions>
  <definition term="--execution-uuid string required">
    The unique identifier for the Attack Discovery generation execution. This UUID is returned at the start of an Attack Discovery generation.
  </definition>
  <definition term="--enable-field-rendering">
    Enables a markdown syntax used to render pivot fields, for example `\{{ user.name james }}`. When disabled, the same example would be rendered as `james`. This is primarily used for Attack Discovery views within Kibana. Defaults to `false`.
  </definition>
  <definition term="--with-replacements">
    When true, return the created Attack discoveries with text replacements applied to the detailsMarkdown, entitySummaryMarkdown, summaryMarkdown, and title fields. Defaults to `true`.
  </definition>
  <definition term="--input-file string">
    path to a JSON file to use as command input
  </definition>
  <definition term="--dry-run">
    validate all inputs and exit without performing any action (preview changes without applying them)
  </definition>
</definitions>


## Global Options

<definitions>
  <definition term="--json">
    output as JSON
  </definition>
</definitions>