---
title: "Bulk enable Attack Discovery schedules"
method: POST
path: "/api/attack_discovery/schedules/_bulk_enable"
tags: ["Security Attack discovery API"]
---

# Bulk enable Attack Discovery schedules

`POST /api/attack_discovery/schedules/_bulk_enable`

**Spaces method and path for this operation:**

<div><span class="operation-verb post">post</span>&nbsp;<span class="operation-path">/s/{space_id}/api/attack_discovery/schedules/_bulk_enable</span></div>

Refer to [Spaces](https://www.elastic.co/docs/deploy-manage/manage-spaces) for more information.

Enables multiple Attack Discovery schedules by ID.

## Request body

- SecurityAttackDiscoveryAPIBulkActionAttackDiscoverySchedulesRequestBody
  - `ids` SecurityAttackDiscoveryAPINonEmptyString[], required — The unique identifiers of the Attack Discovery schedules to update.

## Response `200`

Successfully processed the bulk enable request.

- SecurityAttackDiscoveryAPIBulkActionAttackDiscoverySchedulesResponse
  - `errors` SecurityAttackDiscoveryAPIBulkActionAttackDiscoverySchedulesError[], required
    - `message` string, required — The error message returned for the failed schedule.
    - `rule` object, required
      - `id` string, nonempty, required — A string that does not contain only whitespace characters.
      - `name` string, required — The name of the failed schedule.
    - `status` number — Optional HTTP status associated with the failed schedule operation.
  - `ids` SecurityAttackDiscoveryAPINonEmptyString[], required — The unique identifiers of the schedules successfully affected by the bulk action.
  - `total` number, required — The total number of schedules matched by the bulk action.

## Other responses

- `400` — Bad Request response.

---

[API](https://skmtc.net/elastic/apis/kibana-apis.md) · [All operations](https://skmtc.net/elastic/apis/kibana-apis/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/elastic/kibana-apis/versions/531c9e2a7d23/schema)