Get Elastic Endpoint exception list items

GET /api/endpoint_list/items/_find

Get a list of all Elastic Endpoint exception list items.

Query parameters

  • filter string(nonempty)

    Filters the returned results according to the value of the specified field, using the <field name>:<field value> syntax.

    Minimum length is 1.

  • page integer

    The page number to return

    Minimum value is 0.

  • per_page integer

    The number of exception list items to return per page

    Minimum value is 0.

  • sort_field string(nonempty)

    Determines which field is used to sort the results

    Minimum length is 1.

  • sort_order string

    Determines the sort order, which can be desc or asc

    Values are desc or asc.

Responses

  • 200 application/json

    Successful response

    Hide response attributes Show response attributes object
    • data array Required
    • page integer Required

      Minimum value is 0.

    • per_page integer Required

      Minimum value is 0.

    • pit string
    • total integer Required

      Minimum value is 0.

  • 400 application/json

    Invalid input data

    One of:
  • 401 application/json

    Unsuccessful authentication

    Hide response attributes Show response attributes object
    • error string Required
    • message string Required
    • statusCode integer Required
  • 403 application/json

    Insufficient privileges

    Hide response attributes Show response attributes object
    • error string Required
    • message string Required
    • statusCode integer Required
  • 404 application/json

    Endpoint list not found

    Hide response attributes Show response attributes object
    • message string Required
    • status_code integer Required
  • 500 application/json

    Internal server error

    Hide response attributes Show response attributes object
    • message string Required
    • status_code integer Required
GET /api/endpoint_list/items/_find
curl \
 --request GET 'https://<KIBANA_URL>/api/endpoint_list/items/_find' \
 --header "Authorization: $API_KEY"