stack kb security-entity-analytics-api update-watchlist cli command

elastic stack kb security-entity-analytics-api update-watchlist \
  --id <id> \
  --name <name> \
  --risk-modifier <risk-modifier> \
  [options]
		

Update an existing watchlist

Behaviour flags:

--dry-run — validate all inputs and exit without performing any action

--id string required

The ID of the watchlist to update

--name string required

Unique name of the watchlist

--risk-modifier number required

Risk score modifier associated with the watchlist

--description string

Description of the watchlist

--managed

Indicates if the watchlist is managed by the system

--input-file string

path to a JSON file to use as command input

--dry-run

validate all inputs and exit without performing any action (preview changes without applying them)

--no-validate

skip input validation and send the request as-is

--output-fields string

comma-separated list of fields to include in output (dot-notation supported)

--output-template string

Mustache-like template for custom text output (e.g. "{{id}}: {{name}}")

--json

output as JSON