GET /api/endpoint/action/{action_id}/file/{file_id}
Api key auth Basic auth

Spaces method and path for this operation:

get /s/{space_id}/api/endpoint/action/{action_id}/file/{file_id}

Refer to Spaces for more information.

Get information for the specified response action file download.

Path parameters

  • action_id string Required
  • file_id string Required

    The file identifier is constructed in one of two ways:

    • For Elastic Defend agents (agentType of endpoint): combine the action_id and agent_id values using a dot (.) separator: {file_id} = {action_id}.{agent_id}
    • For all other agent types: the file_id is the agent_id for which the response action was sent to.

Responses

  • 200 application/json

    OK

    Hide response attribute Show response attribute object
    • data object
      Hide data attributes Show data attributes object
      • actionId string
      • agentId string
      • agentType string
      • created string(date-time)
      • id string
      • mimeType string
      • name string
      • size number
      • status string

        Values are AWAITING_UPLOAD, UPLOADING, READY, UPLOAD_ERROR, or DELETED.
GET /api/endpoint/action/{action_id}/file/{file_id} 
curl \ --request GET 'https://localhost:5601/api/endpoint/action/{action_id}/file/{file_id}' \ --header "Authorization: $API_KEY"