Security Osquery API
Get pack details
Spaces method and path for this operation:
<div><span class="operation-verb get">get</span> <span class="operation-path">/s/{space_id}/api/osquery/packs/{id}</span></div>Refer to Spaces for more information.
Get the details of a query pack using the pack ID.
get/api/osquery/packs/{id}
Path parameters
idstring required
The ID of the pack.
Example:3c42c847-eb30-4452-80e0-728584042334
The pack ID.
Response
Indicates a successful call.
Example response
{
"data": {
"created_at": "2022-07-25T19:41:10.263Z",
"created_by": "elastic",
"description": "",
"enabled": true,
"name": "test_pack",
"namespaces": [
"default"
],
"policy_ids": [],
"queries": {
"uptime": {
"ecs_mapping": {
"message": {
"field": "days"
}
},
"interval": 3600,
"query": "select * from uptime"
}
},
"read_only": false,
"saved_object_id": "3c42c847-eb30-4452-80e0-728584042334",
"shards": {},
"type": "osquery-pack",
"updated_at": "2022-07-25T20:12:01.455Z",
"updated_by": "elastic",
"version": 1
}
}