Find Attack Discovery schedules that match the search criteria

Base URL: https://{kibana_url}

GET /api/attack_discovery/schedules/_find
GET /s/{space_id}/api/attack_discovery/schedules/_find

Refer to Spaces for more information.

Find Attack Discovery schedules that match the search criteria. Supports pagination and sorting by various fields.

Authentication

Api key

Authorization: <value>

These APIs use key-based authentication. You must create an API key and use the encoded value in the request header. For example: Authorization: ApiKey base64AccessApiKey

Basic

Authorization: Basic <credentials>

Query parameters

Responses

Indicates a successful call.

application/json

data object[] required: Array of matched Attack Discovery schedule objects.
page number required: Current page number of the paginated result set.
per_page number required: Number of items requested per page.
total number required: Total number of Attack Discovery schedules matching the query (across all pages).

Bad Request response.

application/json

Base URL: https://{kibana_url}

Examples

Request curl 1 / 1 language

curl Shell

curl \
 --request GET 'http://localhost:5601/api/attack_discovery/schedules/_find' \
 --header "Authorization: $API_KEY" \
 --header "Content-Type: application/json"

Response

{
  "data": [
    {
      "actions": [],
      "created_at": "2023-10-31T10:00:00.000Z",
      "created_by": "elastic",
      "enabled": true,
      "id": "12345678-1234-1234-1234-123456789012",
      "name": "Daily Security Analysis",
      "params": {
        "alerts_index_pattern": ".alerts-security.alerts-default",
        "api_config": {
          "actionTypeId": "bedrock",
          "connectorId": "my-bedrock-connector",
          "name": "Claude 3.5 Sonnet"
        },
        "end": "now",
        "size": 100,
        "start": "now-24h"
      },
      "schedule": {
        "interval": "24h"
      },
      "updated_at": "2023-10-31T10:00:00.000Z",
      "updated_by": "elastic"
    }
  ],
  "page": 1,
  "per_page": 10,
  "total": 1
}

{
  "error": "Bad Request",
  "message": "Invalid request payload.",
  "status_code": 400
}