capabilities.work

Import detection rules from NDJSON

One step with Elastic Stack. We can help you get access.

Get something done

Import detection rules from NDJSON

with Elastic Stack · Threat Detection & Response Management

Use Elastic Stack: its Kibana Security Detections API lets you import detection rules from NDJSON in a single step (POST /api/detection_engine/rules/_import). capabilities.work can help you get signed up and connected.

  • Can I import detection rules from an .ndjson export file?
  • Will importing overwrite rules that already exist with the same rule_id?
Say it to your AI assistant
  • Import detection rules from file {file}.
  • Import rules from {file} and overwrite existing ones ({overwrite}).
For your developer

POST /api/detection_engine/rules/_import in Kibana Security Detections API. Full spec on APIs.io.

More you can do with Elastic Stack

Assign users to attack discovery alertsSearch and aggregate attack discoveriesChange the workflow status of attack discoveriesTag or untag attack discoveriesCheck the security alerts indexCreate the security alerts indexDelete the security alerts indexCheck my security detection privilegesGet a detection ruleReplace a detection ruleCreate a detection ruleDelete a detection rule