Security Endpoint Exceptions API

Create an Elastic Endpoint rule exception list

Spaces method and path for this operation:

<div><span class="operation-verb post">post</span>&nbsp;<span class="operation-path">/s/{space_id}/api/endpoint_list</span></div>

Refer to Spaces for more information.

Create the exception list for Elastic Endpoint rule exceptions. When you create the exception list, it will have a list_id of endpoint_list. If the Elastic Endpoint exception list already exists, your request will return an empty response.

post/api/endpoint_list

Response

Successful response

OR
object required

Example response

{
  "description": "This list tracks allowlisted values.",
  "id": "9e5fc75a-a3da-46c5-96e3-a2ec59c6bb85",
  "list_id": "simple_list",
  "name": "My exception list"
}

Changes

Changed in 1 of the 176 revisions of this API.1

    • ●

      added the new endpoint_custom_yara_signatures enum value to the //// response property for the response status

      response-property-enum-value-added

Of the 176 revisions, 20 have no diff computed.