Tags endpoint

IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Aggregates and returns all rule tags.

Aggregates and returns all unique tags from all rules.

GET <kibana host>:<port>/api/detection_engine/tags

Gets tags for all rules in the Kibana default space:

GET api/detection_engine/tags

[
  "zeek",
  "suricata",
  "windows",
  "linux",
  "network",
  "initial access",
  "remote access",
  "phishing"
]