Enable Attack Discovery schedule

Base URL: https://{kibana_url}

POST /api/attack_discovery/schedules/{id}/_enable
POST /s/{space_id}/api/attack_discovery/schedules/{id}/_enable

Auth

Enables a previously disabled Attack Discovery schedule, allowing it to run according to its configured interval. Once enabled, the schedule will begin executing at the next scheduled time based on its interval configuration.

Path parameters

space_id string optional: An identifier for the space. If space_id is not provided in the URL, the default space is used. Refer to Spaces for more information.
id string · format: nonempty · min length: 1 required: The unique identifier (UUID) of the Attack Discovery schedule to enable. This ID is returned when creating a schedule and can be found in schedule listings.; Example: 12345678-1234-1234-1234-123456789012

Responses

Successfully enabled Attack Discovery schedule, returning the schedule ID for confirmation

application/json

id string · format: nonempty · min length: 1 required: A string that does not contain only whitespace characters.

Bad Request response.

application/json

error string: Error type
message string: Human-readable error message describing what went wrong
status_code number: HTTP status code

Base URL: https://{kibana_url}

Examples

Request curl 1 / 1 language

curl Shell

curl \
 --request POST 'http://localhost:5601/api/attack_discovery/schedules/12345678-1234-1234-1234-123456789012/_enable' \
 --header "Authorization: $API_KEY" \
 --header "Content-Type: application/json"

Response

{
  "id": "12345678-1234-1234-1234-123456789012"
}

{
  "error": "Bad Request",
  "message": "Invalid request parameters.",
  "status_code": 400
}