Actions15
- Active Response Actions
- Agent Actions
- Decoder Actions
- Indexer Actions
- Rule Actions
- Security Event Actions
- Vulnerability Actions
Decoder → List
AI-generatedSummary
List Wazuh ruleset decoders with optional filtering and pagination parameters.
Inputs
- Name — Filter decoders by decoder name.
- Filename — Filter decoders by XML filename.
- Relative Directory — Filter decoders by relative decoder directory.
- Status — Filter decoder files by status (Any, All, Disabled, Enabled).
- Search — Text to search for in decoder fields.
- Select — Comma-separated list of specific response fields to return (e.g. name,filename,relative_dirname,status).
- Limit — Maximum number of decoder results to return (minimum 1, default 50).
- Offset — Number of decoder items to skip for pagination.
Output shape
a collection of decoder items with metadata
Returns a normalized collection object with items array containing decoders matching the query. Supports pagination via 'limit' and 'offset'. May include fields filtered by 'select'. The response includes metadata such as total count, total failed, and any failure details.
Examples
Example 1: List all enabled decoders in the 'ruleset/decoders' relative directory, returning only name and status fields, with pagination limit 20
Set resource to 'Decoder', operation to 'List', status to 'enabled', relative directory to 'ruleset/decoders', select fields to 'name,status', and limit to 20.