Get a policy response

Base URL: https://{kibana_url}

GET /api/endpoint/policy_response
GET /s/{space_id}/api/endpoint/policy_response

Refer to Spaces for more information.

Get the most recent policy response for an endpoint.

Authentication

Api key

Authorization: <value>

These APIs use key-based authentication. You must create an API key and use the encoded value in the request header. For example: Authorization: ApiKey base64AccessApiKey

Basic

Authorization: Basic <credentials>

Query parameters

Response

Indicates a successful call.

application/json

Base URL: https://{kibana_url}

Examples

Request Console 1 / 2 languages

Console Kibana Dev Tools

GET kbn:/api/endpoint/policy_response?agentId=AGENT_ID

Generated from the API spec

curl Shell

curl -X GET "${KIBANA_URL}/api/endpoint/policy_response?agentId=${AGENT_ID}" \
  -H "Authorization: ApiKey ${API_KEY}"

Generated from the API spec

Response

{
  "policy_response": {
    "@timestamp": "2023-07-04T15:48:57.360Z",
    "agent": {
      "id": "ed518850-681a-4d60-bb98-e22640cae2a8",
      "version": "7.16.0"
    },
    "Endpoint": {
      "policy": {
        "applied": {
          "endpoint_policy_version": "2",
          "id": "d5371dcd-93b7-4627-af88-4084f7d6aa3e",
          "name": "My endpoint policy",
          "status": "success",
          "version": "3"
        }
      }
    }
  }
}