Release an isolated endpoint
Server:
https://{kibana_url}
- POST /api/endpoint/action/unisolate
- POST /s/{space_id}/api/endpoint/action/unisolate
Refer to Spaces for more information.
Release an isolated endpoint, allowing it to rejoin a network.
Request
-
agent_type -
List of agent types to retrieve. Defaults to
endpoint. -
Values:
endpointsentinel_onecrowdstrikemicrosoft_defender_endpoint -
alert_idsobject · min: 1 -
A list of alerts ids.
-
case_idsobject · min: 1 -
Case IDs to be updated (cannot contain empty strings)
-
commentstring -
Optional comment
-
endpoint_idsobject · min: 1required -
List of endpoint IDs (cannot contain empty strings)
-
parametersobject -
Optional parameters object
Response
OK
Response Type: object