stack kb security-osquery-api osquery-create-saved-query cli command
Auth required
elastic stack kb security-osquery-api osquery-create-saved-query [options]
Create a saved query
Behaviour flags:
--dry-run — validate all inputs and exit without performing any action
--descriptionstring--ecs-mappingstring--idstring--intervalstring--platformstring--querystring--removed--snapshot--versionstring--input-filestring- path to a JSON file to use as command input
--dry-run- validate all inputs and exit without performing any action (preview changes without applying them)
--json-
output as JSON