stack kb security-exceptions-api create-rule-exception-list-items cli command
Auth required
elastic stack kb security-exceptions-api create-rule-exception-list-items \
--id <id> \
--items <items> \
[options]
Create rule exception items
Behaviour flags:
--dry-run — validate all inputs and exit without performing any action
--idstringrequired- Detection rule's identifier
--itemsstring[]required-
Repeatable: pass
--itemsmultiple times to supply more than one value --input-filestring- path to a JSON file to use as command input
--dry-run- validate all inputs and exit without performing any action (preview changes without applying them)
--no-validate- skip input validation and send the request as-is
--output-fieldsstring- comma-separated list of fields to include in output (dot-notation supported)
--output-templatestring- Mustache-like template for custom text output (e.g. "{{id}}: {{name}}")
--json-
output as JSON