stack kb security-osquery-api osquery-export-scheduled-query-results cli command
Auth required
elastic stack kb security-osquery-api osquery-export-scheduled-query-results \
--schedule-id <schedule-id> \
--execution-count <execution-count> \
--format <format> \
[options]
Export scheduled query results
Behaviour flags:
--dry-run — validate all inputs and exit without performing any action
--schedule-idstringrequired- The schedule ID of the scheduled query.
--execution-countstringrequired- The execution counter for the scheduled query run whose results are exported. Must be a non-negative integer.
--formatenumrequired-
The output format of the exported file.
Values: ndjson, json, csv
--bodystring--input-filestring- path to a JSON file to use as command input
--dry-run- validate all inputs and exit without performing any action (preview changes without applying them)
--json-
output as JSON