stack kb security-endpoint-management-api endpoint-file-info cli command

Auth required Idempotent Scope: global
elastic stack kb security-endpoint-management-api endpoint-file-info \
  --action-id <action-id> \
  --file-id <file-id> \
  [options]
		

Get file information

Behaviour flags:

--dry-run — validate all inputs and exit without performing any action

--action-id string required
The ID of the response action that generated the file.
--file-id string required

The file identifier is constructed in one of two ways:

  • For Elastic Defend agents (agentType of endpoint): combine the action_id and agent_id values using a dot (.) separator: {file_id} = {action_id}.{agent_id}
  • For all other agent types: the file_id is the agent_id for which the response action was sent to.
--input-file string
path to a JSON file to use as command input
--dry-run
validate all inputs and exit without performing any action (preview changes without applying them)
--json

output as JSON