Get pack details

Base URL: https://{kibana_url}

GET /api/osquery/packs/{id}
GET /s/{space_id}/api/osquery/packs/{id}

Auth

Get the details of a query pack using the pack ID.

Path parameters

space_id string optional: An identifier for the space. If space_id is not provided in the URL, the default space is used. Refer to Spaces for more information.
id string required: Example: 3c42c847-eb30-4452-80e0-728584042334

Response

application/json

Response Type: object

Base URL: https://{kibana_url}

Examples

Request Console 1 / 2 languages

Console Kibana Dev Tools

GET kbn:/api/osquery/packs/3c42c847-eb30-4452-80e0-728584042334

Generated from the API spec

curl Shell

curl -X GET "${KIBANA_URL}/api/osquery/packs/3c42c847-eb30-4452-80e0-728584042334" \
  -H "Authorization: ApiKey ${API_KEY}"

Generated from the API spec

Response

{
  "data": {
    "created_at": "2022-07-25T19:41:10.263Z",
    "created_by": "elastic",
    "description": "",
    "enabled": true,
    "id": "3c42c847-eb30-4452-80e0-728584042334",
    "name": "test_pack",
    "namespaces": [
      "default"
    ],
    "policy_ids": [],
    "queries": {
      "uptime": {
        "ecs_mapping": {
          "message": {
            "field": "days"
          }
        },
        "interval": 3600,
        "query": "select * from uptime"
      }
    },
    "read_only": false,
    "type": "osquery-pack",
    "updated_at": "2022-07-25T20:12:01.455Z",
    "updated_by": "elastic"
  }
}

Generated from the API spec