stack kb security-detections-api set-attacks-assignees cli command

elastic stack kb security-detections-api set-attacks-assignees \
  --assignees <assignees> \
  --ids <ids> \
  [options]
		

Assign and unassign users from attack discovery alerts

Behaviour flags:

--dry-run — validate all inputs and exit without performing any action

--assignees string required

--ids string[] required

Repeatable: pass --ids multiple times to supply more than one value

--update-related-alerts

--input-file string

path to a JSON file to use as command input

--dry-run

validate all inputs and exit without performing any action (preview changes without applying them)

--no-validate

skip input validation and send the request as-is

--output-fields string

comma-separated list of fields to include in output (dot-notation supported)

--output-template string

Mustache-like template for custom text output (e.g. "{{id}}: {{name}}")

--json

output as JSON