capabilities.work

List and filter detection rules

One step with Elastic Stack. We can help you get access.

Look something up

List and filter detection rules

with Elastic Stack · Threat Detection & Response Management

Use Elastic Stack: its Kibana Security Detections API lets you list and filter detection rules in a single step (GET /api/detection_engine/rules/_find). capabilities.work can help you get signed up and connected.

  • Which detection rules do I have, 20 per page by default?
  • Can I filter detection rules by a KQL query and sort them?
  • Which rules have execution gaps in a given time range?
Say it to your AI assistant
  • List all my detection rules.
  • Find detection rules matching {filter}, sorted by {sort_field}.
  • Show page {page} of detection rules with {per_page} per page.
For your developer

GET /api/detection_engine/rules/_find in Kibana Security Detections API. Full spec on APIs.io.