diff --git a/docs/detections/api/exceptions/api-get-exception-containers.asciidoc b/docs/detections/api/exceptions/api-get-exception-containers.asciidoc index ef77d442b8..dedc24bef6 100644 --- a/docs/detections/api/exceptions/api-get-exception-containers.asciidoc +++ b/docs/detections/api/exceptions/api-get-exception-containers.asciidoc @@ -14,6 +14,11 @@ The URL query must include the container's `id` or `list_id`: * `id` - `GET /api/exception_lists?id=` * `list_id` - `GET /api/exception_lists?list_id=` +(Optional) Use `namespace_type` to to get an exception containers that is available in all {kib} spaces or just the space in which it is created. The available values are: + +* `single`: Only available in the {kib} space in which it is created. This is the default value. +* `agnostic`: Available in all {kib} spaces. + ===== Example request Retrieves the list container with a `list_id` of `allowed-processes`: