Export an exception list

Base URL
https://{kibana_url}
  • POST /api/exception_lists/_export
Auth

Export an exception list and its associated items to an NDJSON file.

Query parameters

id string · format: nonempty · min length: 1 required

Exception list's internal id (UUID) returned on create; use with list_id and namespace_type for an unambiguous target.

Example: 9e5fc75a-a3da-46c5-96e3-a2ec59c6bb85
list_id string · format: nonempty · min length: 1 required

Human-readable list_id of the exception list to export, as shown in the UI and API responses.

Example: simple_list
namespace_type enum required

single exports a list in the current Kibana space; agnostic exports a global (space-agnostic) list.

Values: agnostic single
include_expired_exceptions enum · default: true required

Determines whether to include expired exceptions in the exported list. Expiration date defined by expire_time.

Values: true false

Responses

Successful response

application/ndjson

Response Type: string · format: binary

Base URL
https://{kibana_url}