@@ -17622,36 +17622,61 @@ paths:
1762217622 x-metaTags:
1762317623 - content: Kibana, Elastic Cloud Serverless
1762417624 name: product_name
17625- /api/endpoint/action/running_procs :
17625+ /api/endpoint/action/run_script :
1762617626 post:
1762717627 description: |-
1762817628 **Spaces method and path for this operation:**
1762917629
17630- <div><span class="operation-verb post">post</span> <span class="operation-path">/s/{space_id}/api/endpoint/action/running_procs </span></div>
17630+ <div><span class="operation-verb post">post</span> <span class="operation-path">/s/{space_id}/api/endpoint/action/run_script </span></div>
1763117631
1763217632 Refer to [Spaces](https://www.elastic.co/docs/deploy-manage/manage-spaces) for more information.
1763317633
17634- Get a list of all processes running on an endpoint .
17635- operationId: EndpointGetProcessesAction
17634+ Run a script on a host. Currently supported only for some agent types .
17635+ operationId: RunScriptAction
1763617636 requestBody:
1763717637 content:
1763817638 application/json:
1763917639 examples:
17640- singleEndpoint:
17641- summary: Get running processes on a single endpoint
17640+ Elastic Defend:
17641+ description: Endpoint runscript to collect logs
17642+ summary: Run a script against an Elastic Defend agent
1764217643 value:
17644+ agent_type: endpoint
1764317645 endpoint_ids:
1764417646 - ed518850-681a-4d60-bb98-e22640cae2a8
17647+ parameters:
17648+ scriptId: 1111-2222-3333-4444-5555-6666-7777-8888
17649+ scriptInput: '--path= /usr/log/exec.log'
17650+ MDE:
17651+ description: Microsoft Defender Endpoint runscript
17652+ summary: Run a script against a Microsoft Defender Endpoint agent
17653+ value:
17654+ agent_type: microsoft_defender_endpoint
17655+ endpoint_ids:
17656+ - ed518850-681a-4d60-bb98-e22640cae2a8
17657+ parameters:
17658+ args: '-param1 value1 -param2 value2'
17659+ scriptName: my-script.ps1
17660+ SentinelOne:
17661+ description: SentinelOne runscript
17662+ summary: Run a script against a SentinelOne agent
17663+ value:
17664+ agent_type: sentinel_one
17665+ endpoint_ids:
17666+ - ed518850-681a-4d60-bb98-e22640cae2a8
17667+ parameters:
17668+ scriptId: 1111-2222-3333-4444-5555-6666-7777-8888
17669+ scriptInput: '--delete --paths-to-delete /tmp/temp_file.txt,/tmp/random_file.txt'
1764517670 schema:
17646- $ref: '#/components/schemas/Security_Endpoint_Management_API_GetProcessesRouteRequestBody '
17671+ $ref: '#/components/schemas/Security_Endpoint_Management_API_RunScriptRouteRequestBody '
1764717672 required: true
1764817673 responses:
1764917674 '200':
1765017675 content:
1765117676 application/json:
1765217677 examples:
17653- RunningProcsSuccess :
17654- summary: Running processes action successfully created
17678+ RunScriptSuccess :
17679+ summary: Run script action successfully created
1765517680 value:
1765617681 data:
1765717682 agents:
@@ -17660,8 +17685,8 @@ paths:
1766017685 ed518850-681a-4d60-bb98-e22640cae2a8:
1766117686 isCompleted: false
1766217687 wasSuccessful: false
17663- agentType: endpoint
17664- command: running-processes
17688+ agentType: sentinel_one
17689+ command: runscript
1766517690 createdBy: elastic
1766617691 hosts:
1766717692 ed518850-681a-4d60-bb98-e22640cae2a8:
@@ -17670,73 +17695,50 @@ paths:
1767017695 isCompleted: false
1767117696 isExpired: false
1767217697 outputs: {}
17698+ parameters:
17699+ scriptId: 1111-2222-3333-4444-5555-6666-7777-8888
1767317700 startedAt: '2022-07-29T19:08:49.126Z'
1767417701 status: pending
1767517702 wasSuccessful: false
1767617703 schema:
1767717704 $ref: '#/components/schemas/Security_Endpoint_Management_API_ResponseActionCreateSuccessResponse'
1767817705 description: Indicates a successful call.
17679- summary: Get running processes
17706+ summary: Run a script
1768017707 tags:
1768117708 - Security Endpoint Management API
1768217709 x-metaTags:
1768317710 - content: Kibana, Elastic Cloud Serverless
1768417711 name: product_name
17685- /api/endpoint/action/runscript :
17712+ /api/endpoint/action/running_procs :
1768617713 post:
1768717714 description: |-
1768817715 **Spaces method and path for this operation:**
1768917716
17690- <div><span class="operation-verb post">post</span> <span class="operation-path">/s/{space_id}/api/endpoint/action/runscript </span></div>
17717+ <div><span class="operation-verb post">post</span> <span class="operation-path">/s/{space_id}/api/endpoint/action/running_procs </span></div>
1769117718
1769217719 Refer to [Spaces](https://www.elastic.co/docs/deploy-manage/manage-spaces) for more information.
1769317720
17694- Run a script on a host. Currently supported only for some agent types .
17695- operationId: RunScriptAction
17721+ Get a list of all processes running on an endpoint .
17722+ operationId: EndpointGetProcessesAction
1769617723 requestBody:
1769717724 content:
1769817725 application/json:
1769917726 examples:
17700- Elastic Defend:
17701- description: Endpoint runscript to collect logs
17702- summary: Run a script against an Elastic Defend agent
17703- value:
17704- agent_type: endpoint
17705- endpoint_ids:
17706- - ed518850-681a-4d60-bb98-e22640cae2a8
17707- parameters:
17708- scriptId: 1111-2222-3333-4444-5555-6666-7777-8888
17709- scriptInput: '--path= /usr/log/exec.log'
17710- MDE:
17711- description: Microsoft Defender Endpoint runscript
17712- summary: Run a script against a Microsoft Defender Endpoint agent
17713- value:
17714- agent_type: microsoft_defender_endpoint
17715- endpoint_ids:
17716- - ed518850-681a-4d60-bb98-e22640cae2a8
17717- parameters:
17718- args: '-param1 value1 -param2 value2'
17719- scriptName: my-script.ps1
17720- SentinelOne:
17721- description: SentinelOne runscript
17722- summary: Run a script against a SentinelOne agent
17727+ singleEndpoint:
17728+ summary: Get running processes on a single endpoint
1772317729 value:
17724- agent_type: sentinel_one
1772517730 endpoint_ids:
1772617731 - ed518850-681a-4d60-bb98-e22640cae2a8
17727- parameters:
17728- scriptId: 1111-2222-3333-4444-5555-6666-7777-8888
17729- scriptInput: '--delete --paths-to-delete /tmp/temp_file.txt,/tmp/random_file.txt'
1773017732 schema:
17731- $ref: '#/components/schemas/Security_Endpoint_Management_API_RunScriptRouteRequestBody '
17733+ $ref: '#/components/schemas/Security_Endpoint_Management_API_GetProcessesRouteRequestBody '
1773217734 required: true
1773317735 responses:
1773417736 '200':
1773517737 content:
1773617738 application/json:
1773717739 examples:
17738- RunScriptSuccess :
17739- summary: Run script action successfully created
17740+ RunningProcsSuccess :
17741+ summary: Running processes action successfully created
1774017742 value:
1774117743 data:
1774217744 agents:
@@ -17745,8 +17747,8 @@ paths:
1774517747 ed518850-681a-4d60-bb98-e22640cae2a8:
1774617748 isCompleted: false
1774717749 wasSuccessful: false
17748- agentType: sentinel_one
17749- command: runscript
17750+ agentType: endpoint
17751+ command: running-processes
1775017752 createdBy: elastic
1775117753 hosts:
1775217754 ed518850-681a-4d60-bb98-e22640cae2a8:
@@ -17755,15 +17757,13 @@ paths:
1775517757 isCompleted: false
1775617758 isExpired: false
1775717759 outputs: {}
17758- parameters:
17759- scriptId: 1111-2222-3333-4444-5555-6666-7777-8888
1776017760 startedAt: '2022-07-29T19:08:49.126Z'
1776117761 status: pending
1776217762 wasSuccessful: false
1776317763 schema:
1776417764 $ref: '#/components/schemas/Security_Endpoint_Management_API_ResponseActionCreateSuccessResponse'
1776517765 description: Indicates a successful call.
17766- summary: Run a script
17766+ summary: Get running processes
1776717767 tags:
1776817768 - Security Endpoint Management API
1776917769 x-metaTags:
0 commit comments