Duplicate an exception list Beta
Duplicate an existing exception list.
Query parameters
-
Exception list's human identifier
Minimum length is
1
. Format should match the following pattern:^(?! *$).+$
. -
Determines whether the exception container is available in all Kibana spaces or just the space in which it is created, where:
single
: Only available in the Kibana space in which it is created.agnostic
: Available in all Kibana spaces.
Values are
agnostic
orsingle
. Default value issingle
. -
Determines whether to include expired exceptions in the exported list
Values are
true
orfalse
. Default value istrue
.
Responses
-
200 application/json; Elastic-Api-Version=2023-10-31
Successful response
-
400 application/json; Elastic-Api-Version=2023-10-31
Invalid input data response
-
401 application/json; Elastic-Api-Version=2023-10-31
Unsuccessful authentication response
-
403 application/json; Elastic-Api-Version=2023-10-31
Not enough privileges response
-
405 application/json; Elastic-Api-Version=2023-10-31
Exception list to duplicate not found response
-
500 application/json; Elastic-Api-Version=2023-10-31
Internal server error response
POST /api/exception_lists/_duplicate
curl \
-X POST https://<KIBANA_URL>/api/exception_lists/_duplicate?list_id=string&namespace_type=single&include_expired_exceptions=true
Response examples (200)
{
"_version": "string",
"created_at": "2024-05-04T09:42:00+00:00",
"created_by": "string",
"description": "string",
"id": "string",
"immutable": true,
"list_id": "string",
"meta": {},
"name": "string",
"namespace_type": "single",
"os_types": [
"linux"
],
"tags": [
"string"
],
"tie_breaker_id": "string",
"type": "detection",
"updated_at": "2024-05-04T09:42:00+00:00",
"updated_by": "string",
"version": 42
}
Response examples (400)
Security_exceptions_api_platformerrorresponse
{
"error": "string",
"message": "string",
"statusCode": 42
}
{
"message": "string",
"status_code": 42
}
Response examples (401)
{
"error": "string",
"message": "string",
"statusCode": 42
}
Response examples (403)
{
"error": "string",
"message": "string",
"statusCode": 42
}
Response examples (405)
{
"message": "string",
"status_code": 42
}
Response examples (500)
{
"message": "string",
"status_code": 42
}