Get per-agent status of a scheduled query run
One step with Elastic Stack. We can help you get access.
Look something up
Get per-agent status of a scheduled query run
with Elastic Stack · Threat Detection & Response Management
Use Elastic Stack: its Kibana Security Osquery API lets you get per-agent status of a scheduled query run in a single step (GET /api/osquery/scheduled_results/{scheduleId}/{executionCount}). capabilities.work can help you get signed up and connected.
- Which agents succeeded or failed on a particular scheduled osquery execution?
- Can I see success and failure counts for one scheduled query run?
Say it to your AI assistant
- Show per-agent results for schedule {scheduleId} execution {executionCount}.
- List failing agents in scheduled run {executionCount} of {scheduleId}.
For your developer
GET /api/osquery/scheduled_results/{scheduleId}/{executionCount} in Kibana Security Osquery API. Full spec on APIs.io.