Get action details

Base URL: https://{kibana_url}

GET /api/endpoint/action/{action_id}
GET /s/{space_id}/api/endpoint/action/{action_id}

Auth

Get the details of a response action using the action ID.

Path parameters

space_id string optional: An identifier for the space. If space_id is not provided in the URL, the default space is used. Refer to Spaces for more information.
action_id string required: Example: fr518850-681a-4y60-aa98-e22640cae2b8

Response

application/json

Response Type: object

Base URL: https://{kibana_url}

Examples

Request Console 1 / 2 languages

Console Kibana Dev Tools

GET kbn:/api/endpoint/action/fr518850-681a-4y60-aa98-e22640cae2b8

Generated from the API spec

curl Shell

curl -X GET "${KIBANA_URL}/api/endpoint/action/fr518850-681a-4y60-aa98-e22640cae2b8" \
  -H "Authorization: ApiKey ${API_KEY}"

Generated from the API spec

Response

{
  "data": {
    "agents": [
      "afdc366c-e2e0-4cdb-ae1d-94575bd2d8e0"
    ],
    "agentType": "endpoint",
    "command": "running-processes",
    "completedAt": "2022-08-08T09:50:47.672Z",
    "createdBy": "elastic",
    "id": "b3d6de74-36b0-4fa8-be46-c375bf1771bf",
    "isCompleted": true,
    "isExpired": false,
    "outputs": {
      "afdc366c-e2e0-4cdb-ae1d-94575bd2d8e0": {
        "content": {
          "entries": [
            {
              "command": "/opt/cmd1",
              "entity_id": "fk2ym7bl3oiu3okjcik0xosc0i0m75x3eh49nu3uaqt4dqanjt",
              "pid": "822",
              "user": "Dexter"
            },
            {
              "command": "/opt/cmd3/opt/cmd3/opt/cmd3/opt/cmd3",
              "entity_id": "pwvz91m48wpj9j7ov9gtw8fp7u2rat4eu5ipte37hnhdcbi2pt",
              "pid": "984",
              "user": "Jada"
            }
          ]
        },
        "type": "json"
      }
    },
    "startedAt": "2022-08-08T15:24:57.402Z",
    "wasSuccessful": true
  }
}

Generated from the API spec