Wazuh icon

Wazuh

Work with the Wazuh Server API and Wazuh Indexer API

Actions15

Decoder → List

AI-generated

Summary

List Wazuh ruleset decoders with optional filtering and pagination parameters.

Inputs

  • Name — Filter decoders by decoder name.
  • Filename — Filter decoders by XML filename.
  • Relative Directory — Filter decoders by relative decoder directory.
  • Status — Filter decoder files by status (Any, All, Disabled, Enabled).
  • Search — Text to search for in decoder fields.
  • Select — Comma-separated list of specific response fields to return (e.g. name,filename,relative_dirname,status).
  • Limit — Maximum number of decoder results to return (minimum 1, default 50).
  • Offset — Number of decoder items to skip for pagination.

Output shape

a collection of decoder items with metadata

Returns a normalized collection object with items array containing decoders matching the query. Supports pagination via 'limit' and 'offset'. May include fields filtered by 'select'. The response includes metadata such as total count, total failed, and any failure details.

Examples

Example 1: List all enabled decoders in the 'ruleset/decoders' relative directory, returning only name and status fields, with pagination limit 20

Set resource to 'Decoder', operation to 'List', status to 'enabled', relative directory to 'ruleset/decoders', select fields to 'name,status', and limit to 20.

Links

Discussion