Export Timelines

Base URL: https://{kibana_url}

POST /api/timeline/_export

Export Timelines as an NDJSON file.

Authentication

Api key

Authorization: <value>

These APIs use key-based authentication. You must create an API key and use the encoded value in the request header. For example: Authorization: ApiKey base64AccessApiKey

Basic

Authorization: Basic <credentials>

Query parameters

Request body

Responses

Indicates a successful call.

application/ndjson

Bad Request response.

application/ndjson

Base URL: https://{kibana_url}

Examples

Request Console 1 / 2 languages

Console Kibana Dev Tools

POST kbn:/api/timeline/_export?file_name=FILE_NAME
{
  "ids": [
    "15c1929b-0af7-42bd-85a8-56e234cc7c4e"
  ]
}

Generated from the API spec

curl Shell

curl -X POST "${KIBANA_URL}/api/timeline/_export?file_name=${FILE_NAME}" \
  -H "Authorization: ApiKey ${API_KEY}" \
  -H "Content-Type: application/json" \
  -d '{
    "ids": [
      "15c1929b-0af7-42bd-85a8-56e234cc7c4e"
    ]
  }'

Generated from the API spec

Response

{"savedObjectId":"15c1929b-0af7-42bd-85a8-56e234cc7c4e","version":"WzE0LDFd","title":"Investigation","timelineType":"default"}

{
  "body": "Export limit exceeded",
  "statusCode": 400
}

Authentication

Query parameters

Request body { }

Responses

Request body