Security Detections API

Find and/or aggregate attack discovery alerts

Changed on

Spaces method and path for this operation:

<div><span class="operation-verb post">post</span>&nbsp;<span class="operation-path">/s/{space_id}/api/detection_engine/attacks/search</span></div>

Refer to Spaces for more information.

Find and/or aggregate attack discovery alerts that match the given query. Searches scheduled and ad hoc attack discovery alert indices for the active space only.

post/api/detection_engine/attacks/search

Request

  • Base URL
    https://localhost:5601
  • URL
    https://localhost:5601/api/detection_engine/attacks/search
  • Auth
    • API key in header Authorization
    • or HTTP basic

Request body

aggsobject
fieldsstring[]
queryobject
runtime_mappingsobject
sizeinteger
track_total_hitsboolean

Response

Successful response

object required

Elasticsearch search response

Changes