GET /api/entity_analytics/watchlists/list
Api key auth Basic auth

Spaces method and path for this operation:

get /s/{space_id}/api/entity_analytics/watchlists/list

Refer to Spaces for more information.

Responses

  • 200 application/json

    List of watchlists

    Hide response attributes Show response attributes object
    • createdAt string(date-time)

      Timestamp indicating when the watchlist was created

    • description string

      Description of the watchlist

    • id string

      The unique ID of the watchlist

    • managed boolean Required

      Indicates if the watchlist is managed by the system

    • name string Required

      The name of the watchlist

    • riskModifier number Required

      Risk score modifier associated with the watchlist

    • updatedAt string(date-time)

      Timestamp indicating when the watchlist was last updated
GET /api/entity_analytics/watchlists/list 
curl \
 --request GET 'https://localhost:5601/api/entity_analytics/watchlists/list' \
 --header "Authorization: $API_KEY"
Response examples (200) 
[
  {
    "id": "watchlist-123",
    "name": "High Risk Vendors",
    "managed": false,
    "createdAt": "2026-01-28T12:00:00.000Z",
    "updatedAt": "2026-02-18T12:00:00.000Z",
    "description": "High risk vendor watchlist",
    "riskModifier": 1.5
  },
  {
    "id": "watchlist-456",
    "name": "Privileged Accounts",
    "managed": true,
    "createdAt": "2026-01-10T09:30:00.000Z",
    "updatedAt": "2026-02-01T15:45:00.000Z",
    "description": "Privileged user monitoring watchlist",
    "riskModifier": 2
  }
]