---
title: stack kb security-attack-discovery-api create-attack-discovery-schedules cli command
description: Create Attack Discovery schedule Behaviour flags: --dry-run — validate all inputs and exit without performing any action 
url: https://www.elastic.co/elastic/docs-builder/docs/4118/reference/elastic-cli/cli/stack/kb/security-attack-discovery-api/create-attack-discovery-schedules
applies_to:
  - Elastic Cloud Serverless: Preview
  - Elastic Stack: Preview
---

# stack kb security-attack-discovery-api create-attack-discovery-schedules cli command
<cli-modifiers>
</cli-modifiers>

```bash
elastic stack kb security-attack-discovery-api create-attack-discovery-schedules \
  --name <name> \
  --params <params> \
  --schedule <schedule> \
  [options]
```

Create Attack Discovery schedule
**Behaviour flags:**
`--dry-run` — validate all inputs and exit without performing any action

## Options

<definitions>
  <definition term="--name string required">
    The name of the schedule
  </definition>
  <definition term="--params string required">
    The Attack Discovery schedule configuration parameters
  </definition>
  <definition term="--schedule string required">
    The Attack Discovery schedule interval
  </definition>
  <definition term="--actions string[]">
    The Attack Discovery schedule actions
    **Repeatable:** pass `--actions` multiple times to supply more than one value
  </definition>
  <definition term="--enabled">
    Indicates whether the schedule is enabled
  </definition>
  <definition term="--input-file string">
    path to a JSON file to use as command input
  </definition>
  <definition term="--dry-run">
    validate all inputs and exit without performing any action (preview changes without applying them)
  </definition>
</definitions>


## Global Options

<definitions>
  <definition term="--json">
    output as JSON
  </definition>
</definitions>