The SIEM app is now a part of the Elastic Security solution. Click here to view the current documentation.
IMPORTANT: No additional bug fixes or documentation updates will be released for this version.

› › ›

Tags endpoint

edit

IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Tags endpoint

edit

Aggregates and returns all rule tags.

Get tags

edit

Aggregates and returns all unique tags from all rules.

Request URL

edit

GET <kibana host>:<port>/api/detection_engine/tags

Example request

edit

Gets tags for all rules in the Kibana default space:

GET api/detection_engine/tags

Response code

edit

200: Indicates a successful call.

Example response

edit

[
  "zeek",
  "suricata",
  "windows",
  "linux",
  "network",
  "initial access",
  "remote access",
  "phishing"
]

« Index endpoint Import rules »