stack kb security-osquery-api osquery-export-scheduled-query-results cli command

Auth required
elastic stack kb security-osquery-api osquery-export-scheduled-query-results \
  --schedule-id <schedule-id> \
  --execution-count <execution-count> \
  --format <format> \
  [options]
		

Export scheduled query results

Behaviour flags:

--dry-run — validate all inputs and exit without performing any action

--schedule-id string required
The schedule ID of the scheduled query.
--execution-count string required
The execution counter for the scheduled query run whose results are exported. Must be a non-negative integer.
--format enum required

The output format of the exported file.

Values: ndjson, json, csv

--body string
--input-file string
path to a JSON file to use as command input
--dry-run
validate all inputs and exit without performing any action (preview changes without applying them)
--json

output as JSON