stack kb security-entity-analytics-api assign-watchlist-entities cli command

elastic stack kb security-entity-analytics-api assign-watchlist-entities \
  --watchlist-id <watchlist-id> \
  --euids <euids> \
  [options]
		

Manually assign entities to a watchlist

Behaviour flags:

--dry-run — validate all inputs and exit without performing any action

--watchlist-id string required

The ID of the watchlist to add entities to

--euids string[] required

The EUIDs of the entities to assign

Repeatable: pass --euids multiple times to supply more than one value

--input-file string

path to a JSON file to use as command input

--dry-run

validate all inputs and exit without performing any action (preview changes without applying them)

--no-validate

skip input validation and send the request as-is

--output-fields string

comma-separated list of fields to include in output (dot-notation supported)

--output-template string

Mustache-like template for custom text output (e.g. "{{id}}: {{name}}")

--json

output as JSON