stack kb alerting-v2 get-alerting-v2-execution-history-action-policies cli command

elastic stack kb alerting-v2 get-alerting-v2-execution-history-action-policies \
  [options]
		

List action policy executions

Behaviour flags:

--dry-run — validate all inputs and exit without performing any action

--page number

Page number (1-indexed). Defaults to 1.

--per-page number

Number of events per page. Defaults to 20. Pass 0 for a count-only read.

--start-date string

Inclusive ISO datetime lower bound on the event timestamp; overrides the default 24-hour window. Independent of episode_ids — e.g. set it to an episode’s start time to scope results to that episode’s lifetime.

--episode-ids string[]

Episode filter. Narrows events to those referencing at least one of the provided episode ids.

Repeatable: pass --episode-ids multiple times to supply more than one value

--search string

Free-text search. Matches policy name, rule name, policy/rule ID (case-insensitive).

--rule-ids string[]

Explicit rule filter. Narrows events to those referencing at least one of the provided rule ids. Also unions with the search filter if both are provided.

Repeatable: pass --rule-ids multiple times to supply more than one value

--outcome string[]

Outcome filter. When omitted matches all outcomes. Pass one or more of "dispatched", "throttled", "dispatch_failed" to narrow.

Repeatable: pass --outcome multiple times to supply more than one value

--input-file string

path to a JSON file to use as command input

--dry-run

validate all inputs and exit without performing any action (preview changes without applying them)

--json

output as JSON