diff --git a/docs/detections/api/exceptions/api-create-exception-item.asciidoc b/docs/detections/api/exceptions/api-create-exception-item.asciidoc index b52c488268..c0ce644b0b 100644 --- a/docs/detections/api/exceptions/api-create-exception-item.asciidoc +++ b/docs/detections/api/exceptions/api-create-exception-item.asciidoc @@ -139,7 +139,7 @@ container: [source,console] -------------------------------------------------- -POST api/lists/exception_lists/items +POST api/exception_lists/items { "description": "Excludes the weekly maintenance job", "entries": [ @@ -169,7 +169,7 @@ Adds hosts on which the `maintenance` process is allowed to run to the [source,console] -------------------------------------------------- -POST api/lists/exception_lists/items +POST api/exception_lists/items { "comments": [ {"comment": "Allows maintenance process to run on the specified machines"} @@ -216,7 +216,7 @@ value on Windows OS: [source,console] -------------------------------------------------- -POST api/lists/exception_lists/items +POST api/exception_lists/items { "_tags": [ "endpoint", <1> @@ -255,7 +255,7 @@ as an exception item to the `trusted-IPs` exception container: [source,console] -------------------------------------------------- -POST api/lists/exception_lists/items +POST api/exception_lists/items { "description": "Uses the external-ip-container list to exclude trusted external IPs.", "entries": [ @@ -293,7 +293,7 @@ Adds an exception for nested Endpoint fields: [source,console] -------------------------------------------------- -POST api/lists/exception_lists/items +POST api/exception_lists/items { "description": "Excludes all processes signed by Liverpool FC", "entries": [ diff --git a/docs/detections/api/exceptions/api-update-exception-container.asciidoc b/docs/detections/api/exceptions/api-update-exception-container.asciidoc index 98d3013779..4bdc66783a 100644 --- a/docs/detections/api/exceptions/api-update-exception-container.asciidoc +++ b/docs/detections/api/exceptions/api-update-exception-container.asciidoc @@ -7,7 +7,7 @@ NOTE: Console supports only Elasticsearch APIs. Console doesn't allow interactio ==== Request URL -`PUT :/api/lists` +`PUT :/api/exception_lists` ==== Request body