Disable Attack Discovery schedule

Server: https://{kibana_url}

POST /api/attack_discovery/schedules/{id}/_disable

Disables an Attack Discovery schedule, preventing it from running according to its configured interval. The schedule configuration is preserved and can be re-enabled later. Any currently running executions will complete, but no new executions will be started.

Path Parameters

id string · min: 1 required: The unique identifier (UUID) of the Attack Discovery schedule to disable. This ID is returned when creating a schedule and can be found in schedule listings.

Responses

Successfully disabled Attack Discovery schedule, returning the schedule ID for confirmation

application/json

Bad Request response.

application/json

Examples

Request curl 1 / 1 language

curl Shell

curl \
 --request POST 'http://localhost:5601/api/attack_discovery/schedules/12345678-1234-1234-1234-123456789012/_disable' \
 --header "Authorization: $API_KEY" \
 --header "Content-Type: application/json"

Response

{
  "id": "12345678-1234-1234-1234-123456789012"
}

{
  "error": "Bad Request",
  "message": "Invalid request parameters.",
  "status_code": 400
}