diff --git a/docs/detections/api/exceptions/api-create-exception-item.asciidoc b/docs/detections/api/exceptions/api-create-exception-item.asciidoc index 6f994935fc..75991a42b6 100644 --- a/docs/detections/api/exceptions/api-create-exception-item.asciidoc +++ b/docs/detections/api/exceptions/api-create-exception-item.asciidoc @@ -137,7 +137,7 @@ container: [source,console] -------------------------------------------------- -POST api/lists/exception_lists/items +POST api/exception_lists/items { "description": "Excludes the weekly maintenance job", "entries": [ @@ -167,7 +167,7 @@ Adds hosts on which the `maintenance` process is allowed to run to the [source,console] -------------------------------------------------- -POST api/lists/exception_lists/items +POST api/exception_lists/items { "comments": [ {"comment": "Allows maintenance process to run on the specified machines"} @@ -214,7 +214,7 @@ value on Windows OS: [source,console] -------------------------------------------------- -POST api/lists/exception_lists/items +POST api/exception_lists/items { "_tags": [ "endpoint", <1> @@ -253,7 +253,7 @@ as an exception item to the `trusted-IPs` exception container: [source,console] -------------------------------------------------- -POST api/lists/exception_lists/items +POST api/exception_lists/items { "description": "Uses the external-ip-container list to exclude trusted external IPs.", "entries": [ @@ -291,7 +291,7 @@ Adds an exception for nested Endpoint fields: [source,console] -------------------------------------------------- -POST api/lists/exception_lists/items +POST api/exception_lists/items { "description": "Excludes all processes signed by Trusted Signer, Inc.", "entries": [ diff --git a/docs/detections/api/exceptions/api-update-exception-container.asciidoc b/docs/detections/api/exceptions/api-update-exception-container.asciidoc index 73a797c908..e8aaa0edfd 100644 --- a/docs/detections/api/exceptions/api-update-exception-container.asciidoc +++ b/docs/detections/api/exceptions/api-update-exception-container.asciidoc @@ -5,7 +5,7 @@ Updates an existing exception container. ==== Request URL -`PUT :/api/lists` +`PUT :/api/exception_lists` ==== Request body