Aident logoAident logo centerAident Loadout
Use CasesPricingDocs
ENStart Now
AppsKibana ToolsKibana Get Detection Engine Rules Find
Kibana Tools

Kibana Get Detection Engine Rules Find

Retrieves a paginated list of Kibana detection engine rules with flexible filtering and sorting options. Use this action to: - List all detection rules in your Kibana security solution - Search for specific rules using KQL filters (by name, tags, severity, enabled status, etc.)…

Write actionRisk level 2 of 5API key connection
Use Kibana Get Detection Engine Rules Find

Pricing and limits

Aident logo

Product

Aident LoadoutAident Playbook EditorOpen-CUAK

About

AppsSkillsUse CasesDocsBlogPricingDownloadsPrivacy PolicyTerms of Service

Alternatives

vs Composiovs Zapier
llms.txtGet an AI summary of Aident LoadoutSummarize with ChatGPTSummarize with ClaudeSummarize with GeminiSummarize with Perplexity

© Aident Labs, 2024-2026

Pricing
Free
Unified payment
Not currently supported

Inputs

  • pageinteger
    Page number for pagination, starting at 1. Use with per_page to navigate through large result sets. Defaults to 1.
  • fieldsarray
    List of specific fields to include in the response. If not specified, all fields are returned. Common fields: 'id', 'name', 'enabled', 'type', 'severity', 'risk_score', 'tags'.
  • filterstring
    KQL (Kibana Query Language) filter to narrow down results. Filter by name, enabled status, tags, creator, interval, or updater. Use 'and'/'or' operators for complex queries.
  • per_pageinteger
    Number of rules to return per page (0-10000). Set to 0 to return only metadata without rules. Defaults to 20.
  • sort_fieldstring
    Field name to sort results by. Common options: 'name', 'created_at', 'updated_at', 'enabled', 'risk_score', 'severity'. Only used when specified (omit for default ordering).
  • sort_orderstring
    Sort direction: 'asc' (ascending) or 'desc' (descending). Defaults to 'desc'. Only applied when sort_field is specified.
  • gaps_range_endstring
    End of time range for gap analysis (ISO 8601 format). Used to identify execution gaps in rules. Must be used with gaps_range_start. Example: '2024-12-31T23:59:59Z'.
  • gaps_range_startstring
    Start of time range for gap analysis (ISO 8601 format). Used to identify execution gaps in rules. Must be used with gaps_range_end. Example: '2024-01-01T00:00:00Z'.

Observable output

  • data
    Required
    Data from the action execution
  • errorstring
    Error if any occurred during the execution of the action
  • successfulboolean
    Required
    Whether or not the action execution was successful or not

Skills that use this Action

Related use cases

No verified related use cases are linked yet.

Official source

Provider source

Skills that use this Action

No published Skills explicitly reference this Action yet.