Security Detections API

Find and/or aggregate detection alerts

Spaces method and path for this operation:

<div><span class="operation-verb post">post</span>&nbsp;<span class="operation-path">/s/{space_id}/api/detection_engine/signals/search</span></div>

Refer to Spaces for more information.

Find and/or aggregate detection alerts that match the given query.

post/api/detection_engine/signals/search

Request

  • Base URL
    https://localhost:5601
  • URL
    https://localhost:5601/api/detection_engine/signals/search
  • Auth
    • API key in header Authorization
    • or HTTP basic

Request body

aggsobject
fieldsstring[]
queryobject
runtime_mappingsobject
sizeinteger
track_total_hitsboolean

Response

Successful response

object required

Elasticsearch search response

Changes

No operation changes recorded.