Get exception list details
Server:
https://{kibana_url}
- GET /api/exception_lists
- GET /s/{space_id}/api/exception_lists
Refer to Spaces for more information.
Get the details of an exception list using the id or list_id field.
Query Parameters
-
idstring · min: 1 Either
idorlist_idmust be specified-
list_idstring · min: 1 Either
idorlist_idmust be specified-
namespace_type -
Values:
agnosticsingle
Responses
Successful response
-
_versionstring -
created_atstringrequired -
created_bystringrequired -
descriptionstringrequired -
idstring · min: 1required -
A string that does not contain only whitespace characters
-
immutablebooleanrequired -
list_idstring · min: 1required -
A string that does not contain only whitespace characters
-
metaobject -
namestringrequired -
namespace_typerequired -
Determines whether the exception container is available in all Kibana spaces or just the space in which it is created, where:
single: Only available in the Kibana space in which it is created.agnostic: Available in all Kibana spaces.
-
Values:
agnosticsingle -
os_typesobject -
Values:
linuxmacoswindows -
tie_breaker_idstringrequired -
typerequired -
Values:
detectionrule_defaultendpointendpoint_trusted_appsendpoint_eventsendpoint_host_isolation_exceptionsendpoint_blocklists -
updated_atstringrequired -
updated_bystringrequired -
versioninteger · min: 1required
Invalid input data response
One of:
-
errorstringrequired -
messagestringrequired -
statusCodeintegerrequired
-
messagestringrequired -
status_codeintegerrequired
Unsuccessful authentication response
-
errorstringrequired -
messagestringrequired -
statusCodeintegerrequired
Not enough privileges response
-
errorstringrequired -
messagestringrequired -
statusCodeintegerrequired
Exception list item not found response
-
messagestringrequired -
status_codeintegerrequired
Internal server error response
-
messagestringrequired -
status_codeintegerrequired