stack kb security-entity-analytics-api assign-watchlist-entities cli command
Auth required
elastic stack kb security-entity-analytics-api assign-watchlist-entities \
--watchlist-id <watchlist-id> \
--euids <euids> \
[options]
Manually assign entities to a watchlist
Behaviour flags:
--dry-run — validate all inputs and exit without performing any action
--watchlist-idstringrequired- The ID of the watchlist to add entities to
--euidsstring[]required-
The EUIDs of the entities to assign
Repeatable: pass
--euidsmultiple times to supply more than one value --input-filestring- path to a JSON file to use as command input
--dry-run- validate all inputs and exit without performing any action (preview changes without applying them)
--json-
output as JSON