Security Osquery API
Get saved query details
Spaces method and path for this operation:
<div><span class="operation-verb get">get</span> <span class="operation-path">/s/{space_id}/api/osquery/saved_queries/{id}</span></div>Refer to Spaces for more information.
Get the details of a saved query using the query ID.
get/api/osquery/saved_queries/{id}
Path parameters
idstring required
The ID of a saved query.
Example:3c42c847-eb30-4452-80e0-728584042334
The saved query ID.
Response
Indicates a successful call.
Example response
{
"data": {
"created_at": "2022-07-26T09:28:08.597Z",
"created_by": "elastic",
"description": "Saved query description",
"ecs_mapping": {
"host.uptime": {
"field": "total_seconds"
}
},
"id": "saved_query_id",
"interval": "60",
"platform": "linux,darwin",
"prebuilt": false,
"query": "select * from uptime;",
"saved_object_id": "3c42c847-eb30-4452-80e0-728584042334",
"updated_at": "2022-07-26T09:28:08.597Z",
"updated_by": "elastic",
"version": "2.8.0"
}
}