Dismiss an Attack Discovery generation

Base URL
https://{kibana_url}
Auth

Dismisses an Attack Discovery generation for the current user, indicating that its status should not be reported in the UI. This sets the generation's status to "dismissed" and affects how the generation appears in subsequent queries.

Path parameters

execution_uuid string · format: nonempty · min length: 1 required

The unique identifier for the Attack Discovery generation execution. This UUID is returned when an Attack Discovery generation is created and can be found in generation responses.

Example: 46b218d5-535d-4329-be56-d0f6af6986b7

Responses

Indicates a successful call.

application/json
alerts_context_count number

The number of alerts that were sent as context to the LLM for this generation.

connector_id string required

The unique identifier of the connector used to generate the attack discoveries.

discoveries number required

The number of attack discoveries that were generated during this execution.

end string

The timestamp when the generation process completed, in ISO 8601 format. This field may be absent for generations that haven't finished.

execution_uuid string required

The unique identifier for this attack discovery generation execution. This UUID can be used to reference this specific generation in other API calls.

loading_message string

A human-readable message describing the current state or progress of the generation process. Provides context about what the AI is analyzing.

reason string

Additional context or reasoning provided when a generation fails or encounters issues. This field helps diagnose problems with the generation process.

start string required

The timestamp when the generation process began, in ISO 8601 format. This marks the beginning of the AI analysis.

status enum required

The current status of the attack discovery generation. After dismissing, this will be set to "dismissed".

Values: canceled dismissed failed started succeeded
Base URL
https://{kibana_url}