capabilities.work

Update a saved osquery query

One step with Elastic Stack. We can help you get access.

Get something done

Update a saved osquery query

with Elastic Stack · Threat Detection & Response Management

Use Elastic Stack: its Kibana Security Osquery API lets you update a saved osquery query in a single step (PUT /api/osquery/saved_queries/{id}). capabilities.work can help you get signed up and connected.

  • Can I edit the SQL of a query I saved earlier?
  • Are prebuilt saved queries editable?
Say it to your AI assistant
  • Change saved query {id} to run {query}.
  • Update the interval of saved query {id} to {interval}.
For your developer

PUT /api/osquery/saved_queries/{id} in Kibana Security Osquery API. Full spec on APIs.io.

More you can do with Elastic Stack

Assign users to attack discovery alertsSearch and aggregate attack discoveriesChange the workflow status of attack discoveriesTag or untag attack discoveriesCheck the security alerts indexCreate the security alerts indexDelete the security alerts indexCheck my security detection privilegesGet a detection ruleReplace a detection ruleCreate a detection ruleDelete a detection rule