Retrieves Elastic Endpoint exception list items with filtering, pagination, and sorting capabilities. Use this action to: - List all endpoint exceptions in the security solution - Filter exceptions by specific field values (e.g., host.name:test-host) - Sort and paginate through…
pageintegerPage number to return. Page numbering is 1-based (starts at 1). Defaults to 1 if not specified.
filterstringFilters results using KQL (Kibana Query Language) syntax with format `<field name>:<field value>`. Fields must be namespaced with saved object type (e.g., 'exception-list-agnostic.attributes.name:my-exception'). Common filterable fields include name, description, tags. Minimum l…
per_pageintegerNumber of items per page. Must be at least 1. Defaults to 20 if not specified.
sort_fieldstringField used to sort results. Required if sort_order is specified. Common values: 'created_at', 'updated_at', 'name'. Minimum length is 1.
sort_orderstringSort order, either `desc` or `asc`. Must be used together with sort_field - cannot be specified alone.
dataRequiredData from the action execution
errorstringError if any occurred during the execution of the action
successfulRequiredbooleanWhether or not the action execution was successful or not
API key connection. Risk level 2 of 5.
Free Action
No published Skills explicitly reference this Action yet.