Get file information
Get information for the specified response action file download.
Path parameters
-
The file identifier is constructed in one of two ways:
- For Elastic Defend agents (
agentType
ofendpoint
): combine theaction_id
andagent_id
values using a dot (.
) separator:{file_id}
={action_id}.{agent_id}
- For all other agent types: the
file_id
is theagent_id
for which the response action was sent to.
- For Elastic Defend agents (
GET /api/endpoint/action/{action_id}/file/{file_id}
curl \ --request GET 'https://<KIBANA_URL>/api/endpoint/action/{action_id}/file/{file_id}' \ --header "Authorization: $API_KEY"