Get agents by action ids

Base URL: https://{kibana_url}

POST /api/fleet/agents
POST /s/{space_id}/api/fleet/agents

Refer to Spaces for more information.

Retrieve agents associated with specific action IDs.

Required authorization

Authentication

Api key

Authorization: <value>

These APIs use key-based authentication. You must create an API key and use the encoded value in the request header. For example: Authorization: ApiKey base64AccessApiKey

Basic

Authorization: Basic <credentials>

Header parameters

Request body

Responses

Successful response

application/json

Bad Request

application/json

Base URL: https://{kibana_url}

Examples

Request Console 1 / 2 languages

Retrieve agents associated with specific action IDs

Console Kibana Dev Tools

POST kbn:/api/fleet/agents
{
  "actionIds": [
    "action-id-1",
    "action-id-2"
  ]
}

Generated from the API spec

curl Shell

curl -X POST "${KIBANA_URL}/api/fleet/agents" \
  -H "kbn-xsrf: true" \
  -H "Authorization: ApiKey ${API_KEY}" \
  -H "Content-Type: application/json" \
  -d '{
    "actionIds": [
      "action-id-1",
      "action-id-2"
    ]
  }'

Generated from the API spec

Response

Agents associated with the given actions

{
  "items": [
    {
      "active": true,
      "id": "agent-id-1",
      "policy_id": "agent-policy-id-1",
      "status": "online"
    }
  ],
  "total": 1
}

{
  "error": "Bad Request",
  "message": "An error message describing what went wrong",
  "statusCode": 400
}

Required authorization

Authentication

Header parameters

Request body { }

Responses

Request body