Get the data rows of a scheduled query run
One step with Elastic Stack. We can help you get access.
Look something up
Get the data rows of a scheduled query run
with Elastic Stack · Threat Detection & Response Management
Use Elastic Stack: its Kibana Security Osquery API lets you get the data rows of a scheduled query run in a single step (GET /api/osquery/scheduled_results/{scheduleId}/{executionCount}/results). capabilities.work can help you get signed up and connected.
- What actual osquery output did a scheduled query return on one run?
- Can I page through scheduled query result rows from a start date?
Say it to your AI assistant
- Show the result rows of schedule {scheduleId} execution {executionCount}.
- Get page {page} of output rows for scheduled run {executionCount} of {scheduleId}.
For your developer
GET /api/osquery/scheduled_results/{scheduleId}/{executionCount}/results in Kibana Security Osquery API. Full spec on APIs.io.