Skip to content

Create an osquery extension

POST
/api/v1/extensions
curl --request POST \
--url https://example.com/api/v1/extensions \
--header 'Authorization: <Authorization>' \
--header 'Content-Type: application/json' \
--data '{ "command_execution": true, "description": "example", "name": "example", "version": "example" }'

Adds an extension to the library. Command-execution extensions can only be assigned to individual nodes. Super admins only.

Extension

Media typeapplication/json
object
command_execution
boolean
description
string
name
string
version
string
Examplegenerated
{
"command_execution": true,
"description": "example",
"name": "example",
"version": "example"
}

Created

Media typeapplication/json
object
command_execution
boolean
created_by
string
description
string
environments
integer
files
Array<object>
object
arch
string
filename
string
platform
string
sha256
string
size
integer
updated_at
string
updated_by
string
id
integer
name
string
nodes
integer
updated_at
string
version
string
Examplegenerated
{
"command_execution": true,
"created_by": "example",
"description": "example",
"environments": 1,
"files": [
{
"arch": "example",
"filename": "example",
"platform": "example",
"sha256": "example",
"size": 1,
"updated_at": "example",
"updated_by": "example"
}
],
"id": 1,
"name": "example",
"nodes": 1,
"updated_at": "example",
"version": "example"
}

Bad request

Media typeapplication/json
object
code
string
error
string
Examplegenerated
{
"code": "example",
"error": "example"
}

Unauthorized

Media typeapplication/json
object
code
string
error
string
Examplegenerated
{
"code": "example",
"error": "example"
}

Forbidden

Media typeapplication/json
object
code
string
error
string
Examplegenerated
{
"code": "example",
"error": "example"
}

Name already exists

Media typeapplication/json
object
code
string
error
string
Examplegenerated
{
"code": "example",
"error": "example"
}

Internal server error

Media typeapplication/json
object
code
string
error
string
Examplegenerated
{
"code": "example",
"error": "example"
}