stack kb security-exceptions-api create-exception-list-item cli command

elastic stack kb security-exceptions-api create-exception-list-item \
  --description <description> \
  --name <name> \
  --type <type> \
  --list-id <list-id> \
  [options]
		

Create an exception list item

Behaviour flags:

--dry-run — validate all inputs and exit without performing any action

--description string required

--name string required

--type enum required

Values: simple

--list-id enum required

Values: endpoint_blocklists

--comments string[]

Repeatable: pass --comments multiple times to supply more than one value

--expire-time string

--item-id string

--meta string

--namespace-type enum

Values: agnostic, single

--entries string[]

Validation rules:

• Hash entries: up to 3 (one for each hash type: md5, sha1, sha256)
• Path entry: only 1 allowed

Repeatable: pass --entries multiple times to supply more than one value

--os-types string[]

macOS-only

Repeatable: pass --os-types multiple times to supply more than one value

--tags string[]

Repeatable: pass --tags multiple times to supply more than one value

--input-file string

path to a JSON file to use as command input

--dry-run

validate all inputs and exit without performing any action (preview changes without applying them)

--json

output as JSON