v53

latestOpenAPI 3.0.3raw.githubusercontent.com2026-08-076771,7565.2 MB

Security Exceptions API

Get exception list items

Spaces method and path for this operation:

<div><span class="operation-verb get">get</span> <span class="operation-path">/s/{space_id}/api/exception_lists/items/_find</span></div>

Refer to Spaces for more information.

Get a list of all exception list items in the specified list.

get/api/exception_lists/items/_find

Query parameters

list_idSecurityExceptionsAPIExceptionListHumanId[] required

The list_ids of the items to fetch.

[
  "simple_list"
]

filterSecurityExceptionsAPINonEmptyString[]

Filters the returned results according to the value of the specified field, using the <field name>:<field value> syntax.

namespace_typeSecurityExceptionsAPIExceptionNamespaceType[]

Determines whether the returned containers are Kibana associated with a Kibana space or available in all spaces (agnostic or single)

searchstring

Example:host.name

Free-text search term applied to exception list item fields (for example a hostname or file path fragment).

pageinteger

Example:1

The page number to return

per_pageinteger

Example:20

The number of exception list items to return per page

sort_fieldstring nonempty

A string that does not contain only whitespace characters

Determines which field is used to sort the results.

sort_order'desc' | 'asc'

Example:desc

Determines the sort order, which can be desc or asc.

Response

Successful response

pageinteger required

per_pageinteger required

pitstring

totalinteger required

Example response

{
  "data": [
    {
      "entries": [
        {
          "list": {
            "id": "21b01cfb-058d-44b9-838c-282be16c91cd"
          }
        }
      ],
      "id": "71a9f4b2-c85c-49b4-866f-c71eb9e67da2",
      "item_id": "simple_list_item",
      "list_id": "simple_list"
    }
  ]
}