Body
Required
-
agent_type
string The host agent type (optional). Defaults to endpoint.
Values are
endpoint
,sentinel_one
,crowdstrike
, ormicrosoft_defender_endpoint
. -
alert_ids
array[string(nonempty)] A list of alerts
id
s.At least
1
element. Minimum length of each is1
. -
case_ids
array[string] Case IDs to be updated (cannot contain empty strings)
At least
1
element. Minimum length of each is1
. -
comment
string Optional comment
-
endpoint_ids
array[string] Required List of endpoint IDs (cannot contain empty strings)
At least
1
element. Minimum length of each is1
. -
parameters
object Required Optional parameters object
Additional properties are allowed.
-
file
string(binary) Required
POST
/api/endpoint/action/upload
curl \
--request POST https://localhost:5601/api/endpoint/action/upload \
--header "Content-Type: application/json" \
--data '{"agent_type":"endpoint","alert_ids":["string"],"case_ids":["string"],"comment":"string","endpoint_ids":["string"],"parameters":{},"file":"@file"}'
Request examples
{
"agent_type": "endpoint",
"alert_ids": [
"string"
],
"case_ids": [
"string"
],
"comment": "string",
"endpoint_ids": [
"string"
],
"parameters": {},
"file": "@file"
}
Response examples (200)
{}