Create a pack
Server:
https://{kibana_url}
- POST /api/osquery/packs
- POST /s/{space_id}/api/osquery/packs
Refer to Spaces for more information.
Create a query pack.
Request
-
descriptionstring -
The pack description.
-
enabledboolean -
Enables the pack.
-
namestring -
The pack name.
-
policy_idsobject -
A list of agents policy IDs.
-
queriesobject -
An object of queries.
-
shardsobject -
An object with shard configuration for policies included in the pack. For each policy, set the shard configuration to a percentage (1–100) of target hosts.
Response
OK
Response Type: object