v1

latestOpenAPI 3.0.02026-07-141,4077,1665.2 MB

Security Monitoring

Get content pack states

Get the activation state, integration status, and log collection status for all Cloud SIEM content packs.

get/api/v2/security_monitoring/content_packs/states

Response

Example response

{
  "data": [
    {
      "attributes": {
        "cp_activation": "activated",
        "filters_configured_for_logs": true,
        "integration_installed_status": "installed",
        "logs_last_collected": "within_24_hours",
        "logs_seen_from_any_index": true,
        "state": "active"
      },
      "id": "aws-cloudtrail",
      "type": "content_pack_state"
    }
  ],
  "meta": {
    "sku": "add_on_2024"
  }
}