Get agents
Server:
https://{kibana_url}
- GET /api/fleet/agents
List agents, with optional filtering and pagination.
[Required authorization] Route required privileges: fleet-agents-read.
Query Parameters
-
pagenumber Page number
-
perPagenumber · default: 20 Number of results per page
-
kuerystring A KQL query string to filter results
-
showAgentlessboolean · default: true When true, include agentless agents in the results
-
showInactiveboolean · default: false When true, include inactive agents in the results
-
withMetricsboolean · default: false When true, include CPU and memory metrics in the response
-
showUpgradeableboolean · default: false When true, only return agents that are upgradeable
-
getStatusSummaryboolean · default: false When true, return a summary of agent statuses in the response
-
sortFieldstring Field to sort results by
-
searchAfterstring JSON-encoded array of sort values for
search_afterpagination-
openPitboolean When true, opens a new point-in-time for pagination
-
pitIdstring Point-in-time ID for pagination
-
pitKeepAlivestring Duration to keep the point-in-time alive, for example,
1m
Responses
Successful response
-
itemsobject · max: 10000required -
access_api_keystring -
access_api_key_idstring -
activebooleanrequired -
audit_unenrolled_reasonstring -
capabilitiesstring · max: 100 -
componentsobject · max: 10000 -
default_api_keystring -
default_api_key_historyobject · max: 100 -
idstringrequired -
retired_atstringrequired -
default_api_key_idstring -
effective_configobjectrequired -
enrolled_atstringrequired -
healthmap string to object -
idstringrequired -
identifying_attributesmap string to string -
last_checkinstring -
last_checkin_messagestring -
last_checkin_status -
Values:
erroronlinedegradedupdatingstartingdisconnected -
last_known_status -
Values:
offlineerroronlineinactiveenrollingunenrollingunenrolledupdatingdegradeduninstalledorphaned -
local_metadatamap string to objectrequired -
metricsobject -
cpu_avgnumber -
memory_size_byte_avgnumber -
namespacesstring · max: 100 -
non_identifying_attributesmap string to string -
outputsmap string to object -
<string>object -
api_key_idstring -
to_retire_api_key_idsobject · max: 100 -
idstringrequired -
retired_atstringrequired -
typestring -
packagesstring · max: 10000required -
pipeline_configstring · max: 10000 -
policy_base_idstring -
policy_idstring -
policy_revisionnumbernullable -
sequence_numnumber -
signalsstring · max: 50 -
sortobject · max: 10 -
status -
Values:
offlineerroronlineinactiveenrollingunenrollingunenrolledupdatingdegradeduninstalledorphaned -
typerequired -
Values:
PERMANENTEPHEMERALTEMPORARYOPAMP -
unenrolled_atstring -
unenrollment_started_atstring -
unhealthy_reason· max: 3nullable -
Values:
inputoutputother -
upgradeobject -
rollbacksobject · max: 100 -
valid_untilstringrequired -
versionstringrequired -
upgrade_attemptsstring · max: 10000nullable -
upgrade_detailsobjectnullable -
action_idstringrequired -
metadataobject -
download_percentnumber -
download_ratenumber -
error_msgstring -
failed_state -
Values:
UPG_REQUESTEDUPG_SCHEDULEDUPG_DOWNLOADINGUPG_EXTRACTINGUPG_REPLACINGUPG_RESTARTINGUPG_FAILEDUPG_WATCHINGUPG_ROLLBACK -
reasonstring -
retry_error_msgstring -
retry_untilstring -
scheduled_atstring -
staterequired -
Values:
UPG_REQUESTEDUPG_SCHEDULEDUPG_DOWNLOADINGUPG_EXTRACTINGUPG_REPLACINGUPG_RESTARTINGUPG_FAILEDUPG_WATCHINGUPG_ROLLBACK -
target_versionstringrequired -
upgrade_started_atstringnullable -
upgraded_atstringnullable -
user_provided_metadatamap string to object -
nextSearchAfterstring -
pagenumberrequired -
perPagenumberrequired -
pitstring -
statusSummarymap string to number -
totalnumberrequired
Bad Request
-
attributesobjectrequired -
errorstring -
errorTypestring -
messagestringrequired -
statusCodenumber