stack kb alerting get-alerting-rules-find cli command
Auth required
Idempotent
Scope: global
elastic stack kb alerting get-alerting-rules-find [options]
Get information about rules
Behaviour flags:
--dry-run — validate all inputs and exit without performing any action
--per-pagenumber- The number of rules to return per page.
--pagenumber- The page number to return.
--searchstring- An Elasticsearch simple_query_string query that filters the objects in the response.
--default-search-operatorenum-
The default operator to use for the simple_query_string.
Values: OR, AND
--search-fieldsstring[]-
The fields to perform the simple_query_string parsed query against.
Repeatable: pass
--search-fieldsmultiple times to supply more than one value --sort-fieldstring- Determines which field is used to sort the results. The field must exist in the
attributeskey of the response. --sort-orderenum-
Determines the sort order.
Values: asc, desc
--has-referencestring- Filters the rules that have a relation with the reference objects with a specific type and identifier.
--fieldsstring[]-
The fields to return in the
attributeskey of the response.Repeatable: pass
--fieldsmultiple times to supply more than one value --filterstring- A KQL string that you filter with an attribute from your saved object. It should look like
savedObjectType.attributes.title: "myTitle". However, if you used a direct attribute of a saved object, such asupdatedAt, you must define your filter, for example,savedObjectType.updatedAt > 2018-12-22. --filter-consumersstring[]-
Filters the returned rules by the consumer (Kibana application) that owns them, for example:
siem,apm,infrastructure.Repeatable: pass
--filter-consumersmultiple times to supply more than one value --input-filestring- path to a JSON file to use as command input
--dry-run- validate all inputs and exit without performing any action (preview changes without applying them)
--json-
output as JSON