stack kb security-exceptions-api update-exception-list-item cli command

Auth required Idempotent Scope: global
elastic stack kb security-exceptions-api update-exception-list-item \
  --description <description> \
  --name <name> \
  --type <type> \
  [options]
		

Update an exception list item

Behaviour flags:

--dry-run — validate all inputs and exit without performing any action

--description string required
--name string required
--type enum required

Values: simple

--version string
The version ID, normally returned by the API when the item is retrieved. Use it to ensure updates are made against the latest version.
--comments string[]

Repeatable: pass --comments multiple times to supply more than one value

--expire-time string
--id string
Either id or item_id must be specified
--item-id string
Either id or item_id must be specified
--meta string
--namespace-type enum

Values: agnostic, single

--entries string[]

Validation rules:

  • Hash entries: up to 3 (one for each hash type: md5, sha1, sha256)
  • Path entry: only 1 allowed

Repeatable: pass --entries multiple times to supply more than one value

--list-id enum

Values: endpoint_blocklists

--os-types string[]

macOS-only

Repeatable: pass --os-types multiple times to supply more than one value

--tags string[]

Repeatable: pass --tags multiple times to supply more than one value

--input-file string
path to a JSON file to use as command input
--dry-run
validate all inputs and exit without performing any action (preview changes without applying them)
--json

output as JSON