GET /api/endpoint/action_status
Api key auth

Spaces method and path for this operation:

get /s/{space_id}/api/endpoint/action_status

Refer to Spaces for more information.

Get the status of response actions for the specified agent IDs.

Query parameters

  • agent_ids array[string] | string Required

    A list of agent IDs to get the action status for.

Responses

  • 200 application/json

    Indicates a successful call.

    Hide response attribute Show response attribute object
    • data array[object] Required

      One pending-actions summary entry per requested agent.

      Hide data attributes Show data attributes object
      • agent_id string Required

        Agent ID

      • pending_actions object Required

        One of:
        object-1 object object-2 object

        Additional properties are allowed.
GET /api/endpoint/action_status 
curl \
 --request GET 'https://<KIBANA_URL>/api/endpoint/action_status?agent_ids=agent-id-1&agent_ids=agent-id-2' \
 --header "Authorization: $API_KEY"
Response examples (200) 
{
  "data": [
    {
      "agent_id": "afdc366c-e2e0-4cdb-ae1d-94575bd2d8e0",
      "pending_actions": {
        "execute": 0,
        "get-file": 0,
        "isolate": 0,
        "kill-process": 1,
        "running-processes": 0,
        "scan": 0,
        "unisolate": 0,
        "upload": 0
      }
    }
  ]
}