---
title: stack kb security-attack-discovery-api find-attack-discovery-schedules cli command
description: Find Attack Discovery schedules that match the search criteria Behaviour flags: --dry-run — validate all inputs and exit without performing any action...
url: https://www.elastic.co/elastic/docs-builder/docs/4118/reference/elastic-cli/cli/stack/kb/security-attack-discovery-api/find-attack-discovery-schedules
applies_to:
  - Elastic Cloud Serverless: Preview
  - Elastic Stack: Preview
---

# stack kb security-attack-discovery-api find-attack-discovery-schedules cli command
<cli-modifiers>
</cli-modifiers>

```bash
elastic stack kb security-attack-discovery-api find-attack-discovery-schedules \
  [options]
```

Find Attack Discovery schedules that match the search criteria
**Behaviour flags:**
`--dry-run` — validate all inputs and exit without performing any action

## Options

<definitions>
  <definition term="--page number">
    Page number to return (used for pagination). Defaults to 1.
  </definition>
  <definition term="--per-page number">
    Number of Attack Discovery schedules to return per page (used for pagination). Defaults to 10.
  </definition>
  <definition term="--sort-field string">
    Field used to sort results. Common fields include 'name', 'created_at', 'updated_at', and 'enabled'.
  </definition>
  <definition term="--sort-direction enum">
    Sort order direction. Use 'asc' for ascending or 'desc' for descending. Defaults to 'asc'.
    **Values:** asc, desc
  </definition>
  <definition term="--input-file string">
    path to a JSON file to use as command input
  </definition>
  <definition term="--dry-run">
    validate all inputs and exit without performing any action (preview changes without applying them)
  </definition>
</definitions>


## Global Options

<definitions>
  <definition term="--json">
    output as JSON
  </definition>
</definitions>