@elastic/schemas 0.4.4 → 0.5.0

package/src/kibana/json/post_alerting_rule_id_snooze_schedule.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"schedule":{"type":"object","properties":{"custom":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_schedule_request"}}}},"required":["schedule"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-alerting-rule-id-snooze-schedule"}
+{"type":"object","properties":{"id":{"type":"string","description":"Identifier of the rule.","x-found-in":"path"}},"required":["id"],"allOf":[{"type":"object","properties":{"schedule":{"type":"object","properties":{"custom":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_schedule_request"}}}},"required":["schedule"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-alerting-rule-id-snooze-schedule"}

package/src/kibana/json/post_alerting_rule_id_unmute_all.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"id":{"type":"string","description":"The identifier for the rule.","x-found-in":"path"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-alerting-rule-id-unmute-all"}

package/src/kibana/json/post_alerting_rule_id_update_api_key.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"id":{"type":"string","description":"The identifier for the rule.","x-found-in":"path"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-alerting-rule-id-update-api-key"}

package/src/kibana/json/post_alerting_rule_rule_id_alert_alert_id_mute.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"rule_id":{"type":"string","description":"The identifier for the rule.","x-found-in":"path"},"alert_id":{"type":"string","description":"The identifier for the alert.","x-found-in":"path"},"validate_alerts_existence":{"type":"boolean","description":"Whether to validate the existence of the alert.","x-found-in":"query"}},"required":["rule_id","alert_id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-alerting-rule-rule-id-alert-alert-id-mute"}

package/src/kibana/json/post_alerting_rule_rule_id_alert_alert_id_unmute.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"rule_id":{"type":"string","description":"The identifier for the rule.","x-found-in":"path"},"alert_id":{"type":"string","description":"The identifier for the alert.","x-found-in":"path"}},"required":["rule_id","alert_id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-alerting-rule-rule-id-alert-alert-id-unmute"}

package/src/kibana/json/post_alerting_rules_backfill_find.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"end":{"type":"string","description":"The end date for filtering backfills.","x-found-in":"query"},"page":{"type":"number","description":"The page number to return.","x-found-in":"query"},"per_page":{"type":"number","description":"The number of backfills to return per page.","x-found-in":"query"},"rule_ids":{"type":"string","description":"A comma-separated list of rule identifiers.","x-found-in":"query"},"initiator":{"type":"string","description":"The initiator of the backfill, either `user` for manual backfills or `system` for automatic gap fills.","x-found-in":"query"},"start":{"type":"string","description":"The start date for filtering backfills.","x-found-in":"query"},"sort_field":{"type":"string","description":"The field to sort backfills by.","x-found-in":"query"},"sort_order":{"type":"string","description":"The sort order.","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-alerting-rules-backfill-find"}

package/src/kibana/json/post_attack_discovery_generations_dismiss.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"execution_uuid":{"type":"string","description":"The unique identifier for the Attack Discovery generation execution. This UUID is returned when an Attack Discovery generation is created and can be found in generation responses.","x-found-in":"path"}},"required":["execution_uuid"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PostAttackDiscoveryGenerationsDismiss"}

package/src/kibana/json/post_fleet_agent_policies.request.json

@@ -1 +1 @@
-{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_new_agent_policy","$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agent-policies"}
+{"type":"object","properties":{"sys_monitoring":{"type":"boolean","description":"Whether to add the system integration to the new agent policy","x-found-in":"query"}},"allOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_new_agent_policy"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agent-policies"}

package/src/kibana/json/post_fleet_agent_policies_agentpolicyid_copy.request.json

@@ -1 +1 @@
-{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_copy_agent_policy_request","$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agent-policies-agentpolicyid-copy"}
+{"type":"object","properties":{"agentPolicyId":{"type":"string","description":"The ID of the agent policy","x-found-in":"path"},"format":{"type":"string","description":"Format for the response: simplified or legacy","x-found-in":"query"}},"required":["agentPolicyId"],"allOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_copy_agent_policy_request"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agent-policies-agentpolicyid-copy"}

package/src/kibana/json/post_fleet_agent_policies_bulk_get.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"full":{"type":"boolean","description":"get full policies with package policies populated"},"ids":{"type":"array","items":{"type":"string"},"description":"list of package policy ids"},"ignoreMissing":{"type":"boolean"}},"required":["ids"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agent-policies-bulk-get"}
+{"type":"object","properties":{"format":{"type":"string","description":"Format for the response: simplified or legacy","x-found-in":"query"}},"allOf":[{"type":"object","properties":{"full":{"type":"boolean","description":"get full policies with package policies populated"},"ids":{"type":"array","items":{"type":"string"},"description":"list of package policy ids"},"ignoreMissing":{"type":"boolean"}},"required":["ids"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agent-policies-bulk-get"}

package/src/kibana/json/post_fleet_agentless_policies.request.json

@@ -1 +1 @@
-{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_create_agentless_policy_request","$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agentless-policies"}
+{"type":"object","properties":{"format":{"type":"string","description":"The format of the response package policy.","x-found-in":"query"}},"allOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_create_agentless_policy_request"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agentless-policies"}

package/src/kibana/json/post_fleet_agents_actions_actionid_cancel.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"actionId":{"type":"string","description":"The ID of the action to cancel","x-found-in":"path"}},"required":["actionId"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agents-actions-actionid-cancel"}

package/src/kibana/json/post_fleet_agents_agentid_actions.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"action":{"oneOf":[{"type":"object","properties":{"ack_data":{},"data":{},"type":{"enum":["UNENROLL","UPGRADE","POLICY_REASSIGN"]}},"required":["type","data","ack_data"]},{"type":"object","properties":{"data":{"type":"object","properties":{"log_level":{"enum":["debug","info","warning","error",null,null]}}},"type":{"enum":["SETTINGS"]}},"required":["type","data"]}]}},"required":["action"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agents-agentid-actions"}
+{"type":"object","properties":{"agentId":{"type":"string","description":"The agent ID","x-found-in":"path"}},"required":["agentId"],"allOf":[{"type":"object","properties":{"action":{"oneOf":[{"type":"object","properties":{"ack_data":{},"data":{},"type":{"enum":["UNENROLL","UPGRADE","POLICY_REASSIGN"]}},"required":["type","data","ack_data"]},{"type":"object","properties":{"data":{"type":"object","properties":{"log_level":{"enum":["debug","info","warning","error",null,null]}}},"type":{"enum":["SETTINGS"]}},"required":["type","data"]}]}},"required":["action"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agents-agentid-actions"}

package/src/kibana/json/post_fleet_agents_agentid_migrate.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"enrollment_token":{"type":"string"},"settings":{"type":"object","properties":{"ca_sha256":{"type":"string"},"certificate_authorities":{"type":"string"},"elastic_agent_cert":{"type":"string"},"elastic_agent_cert_key":{"type":"string"},"elastic_agent_cert_key_passphrase":{"type":"string"},"headers":{"type":"object","additionalProperties":{"type":"string"}},"insecure":{"type":"boolean"},"proxy_disabled":{"type":"boolean"},"proxy_headers":{"type":"object","additionalProperties":{"type":"string"}},"proxy_url":{"type":"string"},"replace_token":{"type":"string"},"staging":{"type":"string"},"tags":{"type":"array","items":{"type":"string"}}}},"uri":{"type":"string"}},"required":["uri","enrollment_token"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agents-agentid-migrate"}
+{"type":"object","properties":{"agentId":{"type":"string","description":"The agent ID","x-found-in":"path"}},"required":["agentId"],"allOf":[{"type":"object","properties":{"enrollment_token":{"type":"string"},"settings":{"type":"object","properties":{"ca_sha256":{"type":"string"},"certificate_authorities":{"type":"string"},"elastic_agent_cert":{"type":"string"},"elastic_agent_cert_key":{"type":"string"},"elastic_agent_cert_key_passphrase":{"type":"string"},"headers":{"type":"object","additionalProperties":{"type":"string"}},"insecure":{"type":"boolean"},"proxy_disabled":{"type":"boolean"},"proxy_headers":{"type":"object","additionalProperties":{"type":"string"}},"proxy_url":{"type":"string"},"replace_token":{"type":"string"},"staging":{"type":"string"},"tags":{"type":"array","items":{"type":"string"}}}},"uri":{"type":"string"}},"required":["uri","enrollment_token"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agents-agentid-migrate"}

package/src/kibana/json/post_fleet_agents_agentid_privilege_level_change.request.json

@@ -1 +1 @@
-{"oneOf":[{"type":"object","properties":{"user_info":{"type":"object","properties":{"groupname":{"type":"string"},"password":{"type":"string"},"username":{"type":"string"}}}}},{"type":"null"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agents-agentid-privilege-level-change"}
+{"type":"object","properties":{"agentId":{"type":"string","description":"The agent ID to change privilege level for","x-found-in":"path"}},"required":["agentId"],"allOf":[{"oneOf":[{"type":"object","properties":{"user_info":{"type":"object","properties":{"groupname":{"type":"string"},"password":{"type":"string"},"username":{"type":"string"}}}}},{"type":"null"}]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agents-agentid-privilege-level-change"}

package/src/kibana/json/post_fleet_agents_agentid_reassign.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"policy_id":{"type":"string"}},"required":["policy_id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agents-agentid-reassign"}
+{"type":"object","properties":{"agentId":{"type":"string","description":"The agent ID","x-found-in":"path"}},"required":["agentId"],"allOf":[{"type":"object","properties":{"policy_id":{"type":"string"}},"required":["policy_id"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agents-agentid-reassign"}

package/src/kibana/json/post_fleet_agents_agentid_remove_collector.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"agentId":{"type":"string","description":"The collector agent ID","x-found-in":"path"}},"required":["agentId"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agents-agentid-remove-collector"}

package/src/kibana/json/post_fleet_agents_agentid_request_diagnostics.request.json

@@ -1 +1 @@
-{"oneOf":[{"type":"object","properties":{"additional_metrics":{"type":"array","items":{"enum":["CPU"]}}}},{"type":"null"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agents-agentid-request-diagnostics"}
+{"type":"object","properties":{"agentId":{"type":"string","description":"The agent ID","x-found-in":"path"}},"required":["agentId"],"allOf":[{"oneOf":[{"type":"object","properties":{"additional_metrics":{"type":"array","items":{"enum":["CPU"]}}}},{"type":"null"}]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agents-agentid-request-diagnostics"}

package/src/kibana/json/post_fleet_agents_agentid_rollback.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"agentId":{"type":"string","description":"The agent ID to rollback","x-found-in":"path"}},"required":["agentId"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agents-agentid-rollback"}

package/src/kibana/json/post_fleet_agents_agentid_unenroll.request.json

@@ -1 +1 @@
-{"oneOf":[{"type":"object","properties":{"force":{"type":"boolean"},"revoke":{"type":"boolean"}}},{"type":"null"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agents-agentid-unenroll"}
+{"type":"object","properties":{"agentId":{"type":"string","description":"The agent ID","x-found-in":"path"}},"required":["agentId"],"allOf":[{"oneOf":[{"type":"object","properties":{"force":{"type":"boolean"},"revoke":{"type":"boolean"}}},{"type":"null"}]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agents-agentid-unenroll"}

package/src/kibana/json/post_fleet_agents_agentid_upgrade.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"force":{"type":"boolean"},"skipRateLimitCheck":{"type":"boolean"},"source_uri":{"type":"string"},"version":{"type":"string"}},"required":["version"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agents-agentid-upgrade"}
+{"type":"object","properties":{"agentId":{"type":"string","description":"The agent ID","x-found-in":"path"}},"required":["agentId"],"allOf":[{"type":"object","properties":{"force":{"type":"boolean"},"skipRateLimitCheck":{"type":"boolean"},"source_uri":{"type":"string"},"version":{"type":"string"}},"required":["version"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-agents-agentid-upgrade"}

package/src/kibana/json/post_fleet_epm_packages.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"ignoreMappingUpdateErrors":{"type":"boolean","description":"When true, ignore mapping update errors during installation","x-found-in":"query"},"skipDataStreamRollover":{"type":"boolean","description":"When true, skip data stream rollover after installation","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-epm-packages"}

package/src/kibana/json/post_fleet_epm_packages_bulk.request.json

@@ -1 +1 @@
-{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_bulk_install_packages_from_registry_request","$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-epm-packages-bulk"}
+{"type":"object","properties":{"prerelease":{"type":"boolean","description":"When true, allow installing prerelease versions","x-found-in":"query"}},"allOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_bulk_install_packages_from_registry_request"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-epm-packages-bulk"}

package/src/kibana/json/post_fleet_epm_packages_pkgname.request.json

@@ -1 +1 @@
-{"oneOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_install_package_from_registry_request"},{"type":"null"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-epm-packages-pkgname"}
+{"type":"object","properties":{"pkgName":{"type":"string","description":"Package name","x-found-in":"path"},"prerelease":{"type":"boolean","description":"When true, allow installing prerelease versions","x-found-in":"query"},"ignoreMappingUpdateErrors":{"type":"boolean","description":"When true, ignore mapping update errors during installation","x-found-in":"query"},"skipDataStreamRollover":{"type":"boolean","description":"When true, skip data stream rollover after installation","x-found-in":"query"},"skipDependencyCheck":{"type":"boolean","description":"Skip dependency validation when installing a package with dependencies","x-found-in":"query"}},"required":["pkgName"],"allOf":[{"oneOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_install_package_from_registry_request"},{"type":"null"}]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-epm-packages-pkgname"}

package/src/kibana/json/post_fleet_epm_packages_pkgname_pkgversion.request.json

@@ -1 +1 @@
-{"oneOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_install_package_from_registry_request"},{"type":"null"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-epm-packages-pkgname-pkgversion"}
+{"type":"object","properties":{"pkgName":{"type":"string","description":"Package name","x-found-in":"path"},"pkgVersion":{"type":"string","description":"Package version","x-found-in":"path"},"prerelease":{"type":"boolean","description":"When true, allow installing prerelease versions","x-found-in":"query"},"ignoreMappingUpdateErrors":{"type":"boolean","description":"When true, ignore mapping update errors during installation","x-found-in":"query"},"skipDataStreamRollover":{"type":"boolean","description":"When true, skip data stream rollover after installation","x-found-in":"query"},"skipDependencyCheck":{"type":"boolean","description":"Skip dependency validation when installing a package with dependencies","x-found-in":"query"}},"required":["pkgName","pkgVersion"],"allOf":[{"oneOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_install_package_from_registry_request"},{"type":"null"}]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-epm-packages-pkgname-pkgversion"}

package/src/kibana/json/post_fleet_epm_packages_pkgname_pkgversion_kibana_assets.request.json

@@ -1 +1 @@
-{"oneOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_install_kibana_assets_request"},{"type":"null"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-epm-packages-pkgname-pkgversion-kibana-assets"}
+{"type":"object","properties":{"pkgName":{"type":"string","description":"Package name","x-found-in":"path"},"pkgVersion":{"type":"string","description":"Package version","x-found-in":"path"}},"required":["pkgName","pkgVersion"],"allOf":[{"oneOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_install_kibana_assets_request"},{"type":"null"}]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-epm-packages-pkgname-pkgversion-kibana-assets"}

package/src/kibana/json/post_fleet_epm_packages_pkgname_pkgversion_rule_assets.request.json

@@ -1 +1 @@
-{"oneOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_install_rule_assets_request"},{"type":"null"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-epm-packages-pkgname-pkgversion-rule-assets"}
+{"type":"object","properties":{"pkgName":{"type":"string","description":"Package name","x-found-in":"path"},"pkgVersion":{"type":"string","description":"Package version","x-found-in":"path"}},"required":["pkgName","pkgVersion"],"allOf":[{"oneOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_install_rule_assets_request"},{"type":"null"}]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-epm-packages-pkgname-pkgversion-rule-assets"}

package/src/kibana/json/post_fleet_epm_packages_pkgname_pkgversion_transforms_authorize.request.json

@@ -1 +1 @@
-{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_reauthorize_transform_request","$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-epm-packages-pkgname-pkgversion-transforms-authorize"}
+{"type":"object","properties":{"pkgName":{"type":"string","description":"Package name","x-found-in":"path"},"pkgVersion":{"type":"string","description":"Package version","x-found-in":"path"},"prerelease":{"type":"boolean","description":"When true, allow prerelease versions","x-found-in":"query"}},"required":["pkgName","pkgVersion"],"allOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_reauthorize_transform_request"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-epm-packages-pkgname-pkgversion-transforms-authorize"}

package/src/kibana/json/post_fleet_epm_packages_pkgname_review_upgrade.request.json

@@ -1 +1 @@
-{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_review_upgrade_request","$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-epm-packages-pkgname-review-upgrade"}
+{"type":"object","properties":{"pkgName":{"type":"string","description":"Package name to review upgrade for","x-found-in":"path"}},"required":["pkgName"],"allOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_review_upgrade_request"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-epm-packages-pkgname-review-upgrade"}

package/src/kibana/json/post_fleet_epm_packages_pkgname_rollback.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"pkgName":{"type":"string","description":"Package name to roll back","x-found-in":"path"}},"required":["pkgName"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-epm-packages-pkgname-rollback"}

package/src/kibana/json/post_fleet_message_signing_service_rotate_key_pair.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"acknowledge":{"type":"boolean","description":"Set to true to confirm you understand the risks of rotating the key pair","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-message-signing-service-rotate-key-pair"}

package/src/kibana/json/post_fleet_outputs.request.json

@@ -1 +1 @@
-{"oneOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_new_output_elasticsearch"},{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_new_output_remote_elasticsearch"},{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_new_output_logstash"},{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_new_output_kafka"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-outputs"}
+{"type":"object","properties":{"allow_edit":{"type":"array","items":{"type":"string"}},"ca_sha256":{"oneOf":[{"type":"string"},{"type":"null"}]},"ca_trusted_fingerprint":{"oneOf":[{"type":"string"},{"type":"null"}]},"config_yaml":{"oneOf":[{"type":"string"},{"type":"null"}]},"hosts":{"type":"array","items":{"type":"string"}},"id":{"type":"string"},"is_default":{"type":"boolean"},"is_default_monitoring":{"type":"boolean"},"is_internal":{"type":"boolean"},"is_preconfigured":{"type":"boolean"},"name":{"type":"string"},"otel_disable_beatsauth":{"oneOf":[{"type":"boolean"},{"type":"null"}]},"otel_exporter_config_yaml":{"oneOf":[{"type":"string"},{"type":"null"}]},"preset":{"enum":["balanced","custom","throughput","scale","latency"]},"proxy_id":{"oneOf":[{"type":"string"},{"type":"null"}]},"secrets":{"type":"object","properties":{"password":{"oneOf":[{"type":"object","properties":{"hash":{"type":"string"},"id":{"type":"string"}},"required":["id"]},{"type":"string"}]},"ssl":{"type":"object","properties":{"key":{"oneOf":[{"type":"object","properties":{"hash":{"type":"string"},"id":{"type":"string"}},"required":["id"]},{"type":"string"}]}},"required":["key"]}}},"shipper":{"oneOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_output_shipper"},{"type":"null"}]},"ssl":{"oneOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_output_ssl"},{"type":"null"}]},"type":{"enum":["kafka"]},"write_to_logs_streams":{"oneOf":[{"type":"boolean"},{"type":"null"}]},"kibana_api_key":{"oneOf":[{"type":"string"},{"type":"null"}]},"kibana_url":{"oneOf":[{"type":"string"},{"type":"null"}]},"service_token":{"oneOf":[{"type":"string"},{"type":"null"}]},"sync_integrations":{"type":"boolean"},"sync_uninstalled_integrations":{"type":"boolean"},"auth_type":{"enum":["none","user_pass","ssl","kerberos"]},"broker_timeout":{"type":"number"},"client_id":{"type":"string"},"compression":{"enum":["gzip","snappy","lz4","none"]},"compression_level":{"oneOf":[{"type":"number"},{"type":"null"}]},"connection_type":{"enum":["plaintext","encryption"]},"hash":{"type":"object","properties":{"hash":{"type":"string"},"random":{"type":"boolean"}}},"headers":{"type":"array","items":{"type":"object","properties":{"key":{"type":"string"},"value":{"type":"string"}},"required":["key","value"]}},"key":{"type":"string"},"partition":{"enum":["random","round_robin","hash"]},"password":{"oneOf":[{"type":"string"},{"type":"null"}]},"random":{"type":"object","properties":{"group_events":{"type":"number"}}},"required_acks":{"enum":[1,0,-1]},"round_robin":{"type":"object","properties":{"group_events":{"type":"number"}}},"sasl":{"oneOf":[{"type":"object","properties":{"mechanism":{"enum":["PLAIN","SCRAM-SHA-256","SCRAM-SHA-512"]}}},{"type":"null"}]},"timeout":{"type":"number"},"topic":{"type":"string"},"username":{"oneOf":[{"type":"string"},{"type":"null"}]},"version":{"type":"string"}},"required":["name","type","hosts"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-outputs"}

package/src/kibana/json/post_fleet_package_policies.request.json

@@ -1 +1 @@
-{"oneOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_create_package_policy_request"},{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_simplified_create_package_policy_request"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-package-policies"}
+{"type":"object","properties":{"format":{"type":"string","description":"Format for the response: simplified or legacy","x-found-in":"query"}},"allOf":[{"type":"object","properties":{"additional_datastreams_permissions":{"oneOf":[{"type":"array","items":{"type":"string"}},{"type":"null"}],"description":"Additional data stream permissions that will be added to the agent policy."},"cloud_connector_id":{"oneOf":[{"type":"string"},{"type":"null"}],"description":"ID of the cloud connector associated with this package policy."},"cloud_connector_name":{"oneOf":[{"type":"string"},{"type":"null"}],"description":"Transient field for cloud connector name during creation."},"condition":{"oneOf":[{"type":"string"},{"type":"null"}],"description":"Agent condition expression to evaluate whether to apply this integration to its inputs."},"create_dataset_templates":{"type":"boolean","description":"When true, install dedicated index templates for streams with a custom data_stream.dataset. Defaults to true for input packages, false for integration packages."},"description":{"type":"string","description":"Policy description."},"enabled":{"type":"boolean"},"force":{"type":"boolean","description":"Force package policy creation even if the package is not verified, or if the agent policy is managed."},"global_data_tags":{"oneOf":[{"type":"array","items":{"type":"object","properties":{"name":{"type":"string","description":"The name of the custom field. Cannot contain spaces."},"value":{"oneOf":[{"type":"string"},{"type":"number"}],"description":"The value of the custom field."}},"required":["name","value"]}},{"type":"null"}]},"id":{"type":"string","description":"Policy unique identifier."},"inputs":{"type":"object","additionalProperties":{"type":"object","properties":{"condition":{"oneOf":[{"type":"string"},{"type":"null"}],"description":"Agent condition expression to evaluate whether to apply this input."},"deprecated":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_deprecation_info"},"enabled":{"type":"boolean","description":"Enable or disable that input. Defaults to `true` (enabled)."},"streams":{"type":"object","additionalProperties":{"type":"object","properties":{"condition":{"oneOf":[{"type":"string"},{"type":"null"}],"description":"Agent condition expression to evaluate whether to apply this stream."},"deprecated":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_deprecation_info"},"enabled":{"type":"boolean","description":"Enable or disable that stream. Defaults to `true` (enabled)."},"var_group_selections":{"type":"object","additionalProperties":{"type":"string"},"description":"Variable group selections. Maps var_group name to the selected option name within that group."},"vars":{"type":"object","additionalProperties":{"oneOf":[{"type":"string"},{"type":"number"},{"type":"boolean"},{"type":"array","items":{"type":"string"}},{"type":"array","items":{"type":"number"}},{"type":"object","properties":{"id":{"type":"string"},"isSecretRef":{"type":"boolean"}},"required":["id","isSecretRef"]},{"type":"null"}]},"description":"Input/stream level variable. Refer to the integration documentation for more information."}}},"description":"Input streams. Refer to the integration documentation to know which streams are available."},"vars":{"type":"object","additionalProperties":{"oneOf":[{"type":"string"},{"type":"number"},{"type":"boolean"},{"type":"array","items":{"type":"string"}},{"type":"array","items":{"type":"number"}},{"type":"object","properties":{"id":{"type":"string"},"isSecretRef":{"type":"boolean"}},"required":["id","isSecretRef"]},{"type":"null"}]},"description":"Input/stream level variable. Refer to the integration documentation for more information."}}},"description":"Package policy inputs. Refer to the integration documentation to know which inputs are available."},"is_managed":{"type":"boolean"},"name":{"type":"string","description":"Unique name for the policy."},"namespace":{"type":"string","description":"Policy namespace. When not specified, it inherits the agent policy namespace."},"output_id":{"oneOf":[{"type":"string"},{"type":"null"}]},"overrides":{"oneOf":[{"type":"object","properties":{"inputs":{"type":"object","additionalProperties":{}}}},{"type":"null"}],"description":"Override settings that are defined in the package policy. The override option should be used only in unusual circumstances and not as a routine procedure."},"package":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_package_policy_package"},"package_agent_version_condition":{"type":"string"},"policy_id":{"oneOf":[{"type":"string"},{"type":"null"}],"description":"Deprecated. Use policy_ids instead."},"policy_ids":{"type":"array","items":{"type":"string"},"description":"IDs of the agent policies that the package policy will be added to."},"spaceIds":{"type":"array","items":{"type":"string"}},"supports_agentless":{"oneOf":[{"type":"boolean"},{"type":"null"}],"description":"Indicates whether the package policy belongs to an agentless agent policy. Deprecated in favor of the Fleet agentless policies API."},"supports_cloud_connector":{"oneOf":[{"type":"boolean"},{"type":"null"}],"description":"Indicates whether the package policy supports cloud connectors."},"var_group_selections":{"type":"object","additionalProperties":{"type":"string"},"description":"Variable group selections. Maps var_group name to the selected option name within that group."},"vars":{"type":"object","additionalProperties":{"oneOf":[{"type":"string"},{"type":"number"},{"type":"boolean"},{"type":"array","items":{"type":"string"}},{"type":"array","items":{"type":"number"}},{"type":"object","properties":{"id":{"type":"string"},"isSecretRef":{"type":"boolean"}},"required":["id","isSecretRef"]},{"type":"null"}]},"description":"Input/stream level variable. Refer to the integration documentation for more information."}},"required":["name"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-package-policies"}

package/src/kibana/json/post_fleet_package_policies_bulk_get.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"},"description":"list of package policy ids"},"ignoreMissing":{"type":"boolean"}},"required":["ids"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-package-policies-bulk-get"}
+{"type":"object","properties":{"format":{"type":"string","description":"Format for the response: simplified or legacy","x-found-in":"query"}},"allOf":[{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"},"description":"list of package policy ids"},"ignoreMissing":{"type":"boolean"}},"required":["ids"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-fleet-package-policies-bulk-get"}

package/src/kibana/json/post_knowledge_base.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"modelId":{"type":"string","description":"ELSER modelId to use when setting up the Knowledge Base. If not provided, a default model will be used.","x-found-in":"query"},"ignoreSecurityLabs":{"type":"boolean","description":"Indicates whether we should or should not install Security Labs docs when setting up the Knowledge Base. Defaults to `false`.","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PostKnowledgeBase"}

package/src/kibana/json/post_maintenance_window_id_archive.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"id":{"type":"string","description":"The identifier for the maintenance window to be archived.","x-found-in":"path"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-maintenance-window-id-archive"}

package/src/kibana/json/post_maintenance_window_id_unarchive.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"id":{"type":"string","description":"The identifier for the maintenance window to be unarchived.","x-found-in":"path"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-maintenance-window-id-unarchive"}

package/src/kibana/json/post_saved_objects_import.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"overwrite":{"type":"boolean","description":"Overwrites saved objects when they already exist. When used, potential conflict errors are automatically resolved by overwriting the destination object. NOTE: This option cannot be used with the `createNewCopies` option.","x-found-in":"query"},"createNewCopies":{"type":"boolean","description":"Creates copies of saved objects, regenerates each object ID, and resets the origin. When used, potential conflict errors are avoided. NOTE: This option cannot be used with the `overwrite` and `compatibilityMode` options.","x-found-in":"query"},"compatibilityMode":{"type":"boolean","description":"Applies various adjustments to the saved objects that are being imported to maintain compatibility between different Kibana versions. Use this option only if you encounter issues with imported saved objects. NOTE: This option cannot be used with the `createNewCopies` option.","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-saved-objects-import"}

package/src/kibana/json/post_saved_objects_resolve_import_errors.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"createNewCopies":{"type":"boolean","description":"Creates copies of saved objects, regenerates each object ID, and resets the origin.","x-found-in":"query"},"compatibilityMode":{"type":"boolean","description":"Applies adjustments to maintain compatibility between different Kibana versions.","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-saved-objects-resolve-import-errors"}

package/src/kibana/json/post_security_entity_store_entities_entitytype.request.json

@@ -1 +1 @@
-{"oneOf":[{"type":"object","properties":{"@timestamp":{"type":"string"},"asset":{"type":"object","properties":{"business_unit":{"type":"string"},"criticality":{"oneOf":[{"enum":["low_impact","medium_impact","high_impact","extreme_impact"]},{}]},"environment":{"type":"string"},"id":{"type":"string"},"model":{"type":"string"},"name":{"type":"string"},"owner":{"type":"string"},"serial_number":{"type":"string"},"vendor":{"type":"string"}}},"entity":{"type":"object","properties":{"attributes":{"type":"object","properties":{"asset":{"type":"boolean"},"known_redirects":{"type":"array","items":{"type":"string"}},"managed":{"type":"boolean"},"mfa_enabled":{"type":"boolean"},"oauth_consent_restriction":{"type":"string"},"permissions":{"type":"array","items":{"type":"string"}},"storage_class":{"type":"string"},"watchlists":{"type":"array","items":{"type":"string"}}}},"behaviors":{"type":"object","properties":{"anomaly_job_ids":{"type":"array","items":{"type":"string"}},"rule_names":{"type":"array","items":{"type":"string"}}}},"EngineMetadata":{"type":"object","properties":{"Type":{"type":"string"}}},"id":{"type":"string"},"lifecycle":{"type":"object","properties":{"first_seen":{"type":"string"},"last_activity":{"type":"string"},"last_seen":{"type":"string"}}},"name":{"type":"string"},"relationships":{"type":"object","properties":{"accesses_frequently":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"accesses_infrequently":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"administers":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"communicates_with":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"depends_on":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"owns":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"owns_inferred":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"resolution":{"type":"object","properties":{"resolved_to":{"type":"string"},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}}}},"supervises":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}}}},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"schema_version":{"type":"string"},"source":{"type":"array","items":{"type":"string"}},"sub_type":{"type":"string"},"type":{"type":"string"},"url":{"type":"string"}}},"event":{"type":"object","properties":{"ingested":{"type":"string"}}},"labels":{"type":"object","properties":{},"additionalProperties":{}},"tags":{"type":"array","items":{"type":"string"}},"user":{"type":"object","properties":{"domain":{"type":"array","items":{"type":"string"}},"email":{"type":"array","items":{"type":"string"}},"full_name":{"type":"array","items":{"type":"string"}},"hash":{"type":"array","items":{"type":"string"}},"id":{"type":"array","items":{"type":"string"}},"name":{"type":"string"},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"roles":{"type":"array","items":{"type":"string"}}}}}},{"type":"object","properties":{"@timestamp":{"type":"string"},"asset":{"type":"object","properties":{"business_unit":{"type":"string"},"criticality":{"oneOf":[{"enum":["low_impact","medium_impact","high_impact","extreme_impact"]},{}]},"environment":{"type":"string"},"id":{"type":"string"},"model":{"type":"string"},"name":{"type":"string"},"owner":{"type":"string"},"serial_number":{"type":"string"},"vendor":{"type":"string"}}},"entity":{"type":"object","properties":{"attributes":{"type":"object","properties":{"asset":{"type":"boolean"},"known_redirects":{"type":"array","items":{"type":"string"}},"managed":{"type":"boolean"},"mfa_enabled":{"type":"boolean"},"oauth_consent_restriction":{"type":"string"},"permissions":{"type":"array","items":{"type":"string"}},"storage_class":{"type":"string"},"watchlists":{"type":"array","items":{"type":"string"}}}},"behaviors":{"type":"object","properties":{"anomaly_job_ids":{"type":"array","items":{"type":"string"}},"rule_names":{"type":"array","items":{"type":"string"}}}},"EngineMetadata":{"type":"object","properties":{"Type":{"type":"string"}}},"id":{"type":"string"},"lifecycle":{"type":"object","properties":{"first_seen":{"type":"string"},"last_activity":{"type":"string"},"last_seen":{"type":"string"}}},"name":{"type":"string"},"relationships":{"type":"object","properties":{"accesses_frequently":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"accesses_infrequently":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"administers":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"communicates_with":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"depends_on":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"owns":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"owns_inferred":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"resolution":{"type":"object","properties":{"resolved_to":{"type":"string"},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}}}},"supervises":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}}}},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"schema_version":{"type":"string"},"source":{"type":"array","items":{"type":"string"}},"sub_type":{"type":"string"},"type":{"type":"string"},"url":{"type":"string"}}},"event":{"type":"object","properties":{"ingested":{"type":"string"}}},"host":{"type":"object","properties":{"architecture":{"type":"array","items":{"type":"string"}},"domain":{"type":"array","items":{"type":"string"}},"hostname":{"type":"array","items":{"type":"string"}},"id":{"type":"array","items":{"type":"string"}},"ip":{"type":"array","items":{"type":"string"}},"mac":{"type":"array","items":{"type":"string"}},"name":{"type":"string"},"os":{"type":"object","properties":{"family":{"type":"string"},"full":{"type":"string"},"kernel":{"type":"string"},"name":{"oneOf":[{"type":"string"},{"type":"array","items":{"type":"string"}}]},"platform":{"type":"string"},"type":{"oneOf":[{"type":"string"},{"type":"array","items":{"type":"string"}}]},"version":{"type":"string"}}},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"type":{"type":"array","items":{"type":"string"}}}},"labels":{"type":"object","properties":{},"additionalProperties":{}},"tags":{"type":"array","items":{"type":"string"}}}},{"type":"object","properties":{"@timestamp":{"type":"string"},"asset":{"type":"object","properties":{"business_unit":{"type":"string"},"criticality":{"oneOf":[{"enum":["low_impact","medium_impact","high_impact","extreme_impact"]},{}]},"environment":{"type":"string"},"id":{"type":"string"},"model":{"type":"string"},"name":{"type":"string"},"owner":{"type":"string"},"serial_number":{"type":"string"},"vendor":{"type":"string"}}},"entity":{"type":"object","properties":{"attributes":{"type":"object","properties":{"asset":{"type":"boolean"},"known_redirects":{"type":"array","items":{"type":"string"}},"managed":{"type":"boolean"},"mfa_enabled":{"type":"boolean"},"oauth_consent_restriction":{"type":"string"},"permissions":{"type":"array","items":{"type":"string"}},"storage_class":{"type":"string"},"watchlists":{"type":"array","items":{"type":"string"}}}},"behaviors":{"type":"object","properties":{"anomaly_job_ids":{"type":"array","items":{"type":"string"}},"rule_names":{"type":"array","items":{"type":"string"}}}},"EngineMetadata":{"type":"object","properties":{"Type":{"type":"string"}}},"id":{"type":"string"},"lifecycle":{"type":"object","properties":{"first_seen":{"type":"string"},"last_activity":{"type":"string"},"last_seen":{"type":"string"}}},"name":{"type":"string"},"relationships":{"type":"object","properties":{"accesses_frequently":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"accesses_infrequently":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"administers":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"communicates_with":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"depends_on":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"owns":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"owns_inferred":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"resolution":{"type":"object","properties":{"resolved_to":{"type":"string"},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}}}},"supervises":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}}}},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"schema_version":{"type":"string"},"source":{"type":"array","items":{"type":"string"}},"sub_type":{"type":"string"},"type":{"type":"string"},"url":{"type":"string"}}},"event":{"type":"object","properties":{"ingested":{"type":"string"}}},"labels":{"type":"object","properties":{},"additionalProperties":{}},"service":{"type":"object","properties":{"address":{"type":"string"},"environment":{"type":"string"},"ephemeral_id":{"type":"string"},"id":{"type":"string"},"name":{"type":"string"},"node":{"type":"object","properties":{"name":{"type":"string"},"role":{"type":"string"},"roles":{"type":"array","items":{"type":"string"}}}},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"state":{"type":"string"},"type":{"type":"string"},"version":{"type":"string"}}},"tags":{"type":"array","items":{"type":"string"}}}},{"type":"object","properties":{"@timestamp":{"type":"string"},"asset":{"type":"object","properties":{"business_unit":{"type":"string"},"criticality":{"oneOf":[{"enum":["low_impact","medium_impact","high_impact","extreme_impact"]},{}]},"environment":{"type":"string"},"id":{"type":"string"},"model":{"type":"string"},"name":{"type":"string"},"owner":{"type":"string"},"serial_number":{"type":"string"},"vendor":{"type":"string"}}},"cloud":{"type":"object","properties":{"account":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"}}},"availability_zone":{"type":"string"},"instance":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"}}},"machine":{"type":"object","properties":{"type":{"type":"string"}}},"project":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"}}},"provider":{"type":"string"},"region":{"type":"string"},"service":{"type":"object","properties":{"name":{"type":"string"}}}}},"entity":{"type":"object","properties":{"attributes":{"type":"object","properties":{"asset":{"type":"boolean"},"known_redirects":{"type":"array","items":{"type":"string"}},"managed":{"type":"boolean"},"mfa_enabled":{"type":"boolean"},"oauth_consent_restriction":{"type":"string"},"permissions":{"type":"array","items":{"type":"string"}},"storage_class":{"type":"string"},"watchlists":{"type":"array","items":{"type":"string"}}}},"behaviors":{"type":"object","properties":{"anomaly_job_ids":{"type":"array","items":{"type":"string"}},"rule_names":{"type":"array","items":{"type":"string"}}}},"EngineMetadata":{"type":"object","properties":{"Type":{"type":"string"}}},"id":{"type":"string"},"lifecycle":{"type":"object","properties":{"first_seen":{"type":"string"},"last_activity":{"type":"string"},"last_seen":{"type":"string"}}},"name":{"type":"string"},"relationships":{"type":"object","properties":{"accesses_frequently":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"accesses_infrequently":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"administers":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"communicates_with":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"depends_on":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"owns":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"owns_inferred":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"resolution":{"type":"object","properties":{"resolved_to":{"type":"string"},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}}}},"supervises":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}}}},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"schema_version":{"type":"string"},"source":{"type":"array","items":{"type":"string"}},"sub_type":{"type":"string"},"type":{"type":"string"},"url":{"type":"string"}}},"event":{"type":"object","properties":{"ingested":{"type":"string"}}},"labels":{"type":"object","properties":{},"additionalProperties":{}},"orchestrator":{"type":"object","properties":{"api_version":{"type":"string"},"cluster":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"url":{"type":"string"},"version":{"type":"string"}}},"namespace":{"type":"string"},"organization":{"type":"string"},"resource":{"type":"object","properties":{"annotation":{"type":"string"},"id":{"type":"string"},"ip":{"type":"string"},"label":{"type":"string"},"name":{"type":"string"},"parent":{"type":"object","properties":{"type":{"type":"string"}}},"type":{"type":"string"}}},"type":{"type":"string"}}},"tags":{"type":"array","items":{"type":"string"}}}}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-security-entity-store-entities-entitytype"}
+{"type":"object","properties":{"entityType":{"type":"string","description":"The entity type to create.","x-found-in":"path"}},"required":["entityType"],"allOf":[{"type":"object","properties":{"@timestamp":{"type":"string"},"asset":{"type":"object","properties":{"business_unit":{"type":"string"},"criticality":{"oneOf":[{"enum":["low_impact","medium_impact","high_impact","extreme_impact"]},{}]},"environment":{"type":"string"},"id":{"type":"string"},"model":{"type":"string"},"name":{"type":"string"},"owner":{"type":"string"},"serial_number":{"type":"string"},"vendor":{"type":"string"}}},"entity":{"type":"object","properties":{"attributes":{"type":"object","properties":{"asset":{"type":"boolean"},"known_redirects":{"type":"array","items":{"type":"string"}},"managed":{"type":"boolean"},"mfa_enabled":{"type":"boolean"},"oauth_consent_restriction":{"type":"string"},"permissions":{"type":"array","items":{"type":"string"}},"storage_class":{"type":"string"},"watchlists":{"type":"array","items":{"type":"string"}}}},"behaviors":{"type":"object","properties":{"anomaly_job_ids":{"type":"array","items":{"type":"string"}},"rule_names":{"type":"array","items":{"type":"string"}}}},"EngineMetadata":{"type":"object","properties":{"Type":{"type":"string"}}},"id":{"type":"string"},"lifecycle":{"type":"object","properties":{"first_seen":{"type":"string"},"last_activity":{"type":"string"},"last_seen":{"type":"string"}}},"name":{"type":"string"},"relationships":{"type":"object","properties":{"accesses_frequently":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"accesses_infrequently":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"administers":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"communicates_with":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"depends_on":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"owns":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"owns_inferred":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"resolution":{"type":"object","properties":{"resolved_to":{"type":"string"},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}}}},"supervises":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}}}},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"schema_version":{"type":"string"},"source":{"type":"array","items":{"type":"string"}},"sub_type":{"type":"string"},"type":{"type":"string"},"url":{"type":"string"}}},"event":{"type":"object","properties":{"ingested":{"type":"string"}}},"labels":{"type":"object","properties":{},"additionalProperties":{}},"tags":{"type":"array","items":{"type":"string"}},"user":{"type":"object","properties":{"domain":{"type":"array","items":{"type":"string"}},"email":{"type":"array","items":{"type":"string"}},"full_name":{"type":"array","items":{"type":"string"}},"hash":{"type":"array","items":{"type":"string"}},"id":{"type":"array","items":{"type":"string"}},"name":{"type":"string"},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"roles":{"type":"array","items":{"type":"string"}}}},"host":{"type":"object","properties":{"architecture":{"type":"array","items":{"type":"string"}},"domain":{"type":"array","items":{"type":"string"}},"hostname":{"type":"array","items":{"type":"string"}},"id":{"type":"array","items":{"type":"string"}},"ip":{"type":"array","items":{"type":"string"}},"mac":{"type":"array","items":{"type":"string"}},"name":{"type":"string"},"os":{"type":"object","properties":{"family":{"type":"string"},"full":{"type":"string"},"kernel":{"type":"string"},"name":{"oneOf":[{"type":"string"},{"type":"array","items":{"type":"string"}}]},"platform":{"type":"string"},"type":{"oneOf":[{"type":"string"},{"type":"array","items":{"type":"string"}}]},"version":{"type":"string"}}},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"type":{"type":"array","items":{"type":"string"}}}},"service":{"type":"object","properties":{"address":{"type":"string"},"environment":{"type":"string"},"ephemeral_id":{"type":"string"},"id":{"type":"string"},"name":{"type":"string"},"node":{"type":"object","properties":{"name":{"type":"string"},"role":{"type":"string"},"roles":{"type":"array","items":{"type":"string"}}}},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"state":{"type":"string"},"type":{"type":"string"},"version":{"type":"string"}}},"cloud":{"type":"object","properties":{"account":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"}}},"availability_zone":{"type":"string"},"instance":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"}}},"machine":{"type":"object","properties":{"type":{"type":"string"}}},"project":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"}}},"provider":{"type":"string"},"region":{"type":"string"},"service":{"type":"object","properties":{"name":{"type":"string"}}}}},"orchestrator":{"type":"object","properties":{"api_version":{"type":"string"},"cluster":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"url":{"type":"string"},"version":{"type":"string"}}},"namespace":{"type":"string"},"organization":{"type":"string"},"resource":{"type":"object","properties":{"annotation":{"type":"string"},"id":{"type":"string"},"ip":{"type":"string"},"label":{"type":"string"},"name":{"type":"string"},"parent":{"type":"object","properties":{"type":{"type":"string"}}},"type":{"type":"string"}}},"type":{"type":"string"}}}}}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-security-entity-store-entities-entitytype"}

package/src/kibana/json/post_streams_disable.request.json

@@ -1 +1 @@
-{"oneOf":[{"type":"object","properties":{}},{},{}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-streams-disable"}
+{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-streams-disable"}

package/src/kibana/json/post_streams_enable.request.json

@@ -1 +1 @@
-{"oneOf":[{"type":"object","properties":{}},{},{}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-streams-enable"}
+{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-streams-enable"}

package/src/kibana/json/post_streams_name_content_export.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"description":{"type":"string"},"include":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_ContentPackIncludedObjects"},"name":{"type":"string"},"version":{"type":"string"}},"required":["name","description","version","include"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-streams-name-content-export"}
+{"type":"object","properties":{"name":{"type":"string","description":"The name of the stream to export content from.","x-found-in":"path"}},"required":["name"],"allOf":[{"type":"object","properties":{"description":{"type":"string"},"include":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_ContentPackIncludedObjects"},"name":{"type":"string"},"version":{"type":"string"}},"required":["name","description","version","include"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-streams-name-content-export"}

package/src/kibana/json/post_streams_name_content_import.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"name":{"type":"string","description":"The name of the stream to import content into.","x-found-in":"path"}},"required":["name"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-streams-name-content-import"}

package/src/kibana/json/post_streams_name_fork.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"draft":{"type":"boolean"},"status":{"enum":["enabled","disabled"]},"stream":{"type":"object","properties":{"name":{"type":"string"}},"required":["name"]},"where":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_Condition"}},"required":["stream","where"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-streams-name-fork"}
+{"type":"object","properties":{"name":{"type":"string","description":"The name of the parent stream to fork from.","x-found-in":"path"}},"required":["name"],"allOf":[{"type":"object","properties":{"draft":{"type":"boolean"},"status":{"enum":["enabled","disabled"]},"stream":{"type":"object","properties":{"name":{"type":"string"}},"required":["name"]},"where":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_Condition"}},"required":["stream","where"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-streams-name-fork"}

package/src/kibana/json/post_streams_name_queries_bulk.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"operations":{"type":"array","items":{"oneOf":[{"type":"object","properties":{"index":{"type":"object","properties":{"description":{"type":"string"},"esql":{"type":"object","properties":{"query":{"type":"string"}},"required":["query"]},"evidence":{"type":"array","items":{"type":"string"}},"id":{"type":"string","description":"A non-empty string."},"severity_score":{"type":"number"},"title":{"type":"string","description":"A non-empty string."}},"required":["title","esql","id"]}},"required":["index"]},{"type":"object","properties":{"delete":{"type":"object","properties":{"id":{"type":"string"}},"required":["id"]}},"required":["delete"]}]}}},"required":["operations"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-streams-name-queries-bulk"}
+{"type":"object","properties":{"name":{"type":"string","description":"The name of the stream.","x-found-in":"path"}},"required":["name"],"allOf":[{"type":"object","properties":{"operations":{"type":"array","items":{"oneOf":[{"type":"object","properties":{"index":{"type":"object","properties":{"description":{"type":"string"},"esql":{"type":"object","properties":{"query":{"type":"string"}},"required":["query"]},"evidence":{"type":"array","items":{"type":"string"}},"id":{"type":"string","description":"A non-empty string."},"severity_score":{"type":"number"},"title":{"type":"string","description":"A non-empty string."}},"required":["title","esql","id"]}},"required":["index"]},{"type":"object","properties":{"delete":{"type":"object","properties":{"id":{"type":"string"}},"required":["id"]}},"required":["delete"]}]}}},"required":["operations"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-streams-name-queries-bulk"}

package/src/kibana/json/post_streams_resync.request.json

@@ -1 +1 @@
-{"oneOf":[{"type":"object","properties":{}},{},{}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-streams-resync"}
+{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-streams-resync"}

package/src/kibana/json/post_streams_streamname_attachments_bulk.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"operations":{"type":"array","items":{"oneOf":[{"type":"object","properties":{"index":{"type":"object","properties":{"id":{"type":"string"},"type":{"enum":["dashboard","rule","slo"]}},"required":["id","type"]}},"required":["index"]},{"type":"object","properties":{"delete":{"type":"object","properties":{"id":{"type":"string"},"type":{"enum":["dashboard","rule","slo"]}},"required":["id","type"]}},"required":["delete"]}]}}},"required":["operations"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-streams-streamname-attachments-bulk"}
+{"type":"object","properties":{"streamName":{"type":"string","description":"The name of the stream","x-found-in":"path"}},"required":["streamName"],"allOf":[{"type":"object","properties":{"operations":{"type":"array","items":{"oneOf":[{"type":"object","properties":{"index":{"type":"object","properties":{"id":{"type":"string"},"type":{"enum":["dashboard","rule","slo"]}},"required":["id","type"]}},"required":["index"]},{"type":"object","properties":{"delete":{"type":"object","properties":{"id":{"type":"string"},"type":{"enum":["dashboard","rule","slo"]}},"required":["id","type"]}},"required":["delete"]}]}}},"required":["operations"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-streams-streamname-attachments-bulk"}

package/src/kibana/json/post_workflows.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"workflows":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"yaml":{"type":"string"}},"required":["yaml"]}}},"required":["workflows"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-workflows"}
+{"type":"object","properties":{"overwrite":{"type":"boolean","description":"Whether to overwrite existing workflows.","x-found-in":"query"}},"allOf":[{"type":"object","properties":{"workflows":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"yaml":{"type":"string"}},"required":["yaml"]}}},"required":["workflows"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-workflows"}

package/src/kibana/json/post_workflows_executions_executionid_cancel.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"executionId":{"type":"string","description":"Workflow execution ID","x-found-in":"path"}},"required":["executionId"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-workflows-executions-executionid-cancel"}

package/src/kibana/json/post_workflows_executions_executionid_resume.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"input":{"type":"object","additionalProperties":{},"description":"Input data to resume the execution with."}},"required":["input"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-workflows-executions-executionid-resume"}
+{"type":"object","properties":{"executionId":{"type":"string","description":"Workflow execution ID","x-found-in":"path"}},"required":["executionId"],"allOf":[{"type":"object","properties":{"input":{"type":"object","additionalProperties":{},"description":"Input data to resume the execution with."}},"required":["input"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-workflows-executions-executionid-resume"}

package/src/kibana/json/post_workflows_workflow_id_clone.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"id":{"type":"string","description":"Workflow ID","x-found-in":"path"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-workflows-workflow-id-clone"}

package/src/kibana/json/post_workflows_workflow_id_run.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"inputs":{"type":"object","additionalProperties":{},"description":"Key-value inputs for the workflow execution."},"metadata":{"type":"object","additionalProperties":{},"description":"Optional metadata for the execution."}},"required":["inputs"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-workflows-workflow-id-run"}
+{"type":"object","properties":{"id":{"type":"string","description":"Workflow ID","x-found-in":"path"}},"required":["id"],"allOf":[{"type":"object","properties":{"inputs":{"type":"object","additionalProperties":{},"description":"Key-value inputs for the workflow execution."},"metadata":{"type":"object","additionalProperties":{},"description":"Optional metadata for the execution."}},"required":["inputs"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-workflows-workflow-id-run"}

package/src/kibana/json/post_workflows_workflow_workflowid_executions_cancel.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"workflowId":{"type":"string","description":"Workflow ID","x-found-in":"path"}},"required":["workflowId"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-workflows-workflow-workflowid-executions-cancel"}

package/src/kibana/json/put_actions_connector_id.request.json

@@ -1 +1 @@
-{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_update_connector","$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-actions-connector-id"}
+{"type":"object","properties":{"id":{"type":"string","description":"An identifier for the connector.","x-found-in":"path"}},"required":["id"],"allOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_update_connector"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-actions-connector-id"}

package/src/kibana/json/put_agent_builder_agents_id.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"avatar_color":{"type":"string","description":"Updated hex color code for the agent avatar."},"avatar_symbol":{"type":"string","description":"Updated symbol/initials for the agent avatar."},"configuration":{"type":"object","properties":{"connector_ids":{"type":"array","items":{"type":"string"},"description":"Array of connector IDs to associate with the agent."},"enable_elastic_capabilities":{"type":"boolean","description":"When true, enables built-in Elastic capabilities for the agent."},"instructions":{"type":"string","description":"Updated system instructions that define the agent behavior."},"plugin_ids":{"type":"array","items":{"type":"string"},"description":"Array of plugin IDs to assign to the agent."},"skill_ids":{"type":"array","items":{"type":"string"},"description":"Array of skill IDs to be available to the agent."},"tools":{"type":"array","items":{"type":"object","properties":{"tool_ids":{"type":"array","items":{"type":"string"},"description":"Array of tool IDs that the agent can use."}},"required":["tool_ids"]}},"workflow_ids":{"type":"array","items":{"type":"string"}}},"description":"Updated configuration settings for the agent."},"description":{"type":"string","description":"Updated description of what the agent does."},"labels":{"type":"array","items":{"type":"string"},"description":"Updated labels for categorizing and organizing agents."},"name":{"type":"string","description":"Updated display name for the agent."},"visibility":{"enum":["public","shared","private"],"description":"**Technical Preview; added in 9.4.0.** Updated visibility setting: `public` (any privileged user can read/write), `shared` (any privileged user can read, only owner can write), `private` (only owner can read/write)."}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-agent-builder-agents-id"}
+{"type":"object","properties":{"id":{"type":"string","description":"The unique identifier of the agent to update.","x-found-in":"path"}},"required":["id"],"allOf":[{"type":"object","properties":{"avatar_color":{"type":"string","description":"Updated hex color code for the agent avatar."},"avatar_symbol":{"type":"string","description":"Updated symbol/initials for the agent avatar."},"configuration":{"type":"object","properties":{"connector_ids":{"type":"array","items":{"type":"string"},"description":"Array of connector IDs to associate with the agent."},"enable_elastic_capabilities":{"type":"boolean","description":"When true, enables built-in Elastic capabilities for the agent."},"instructions":{"type":"string","description":"Updated system instructions that define the agent behavior."},"plugin_ids":{"type":"array","items":{"type":"string"},"description":"Array of plugin IDs to assign to the agent."},"skill_ids":{"type":"array","items":{"type":"string"},"description":"Array of skill IDs to be available to the agent."},"tools":{"type":"array","items":{"type":"object","properties":{"tool_ids":{"type":"array","items":{"type":"string"},"description":"Array of tool IDs that the agent can use."}},"required":["tool_ids"]}},"workflow_ids":{"type":"array","items":{"type":"string"}}},"description":"Updated configuration settings for the agent."},"description":{"type":"string","description":"Updated description of what the agent does."},"labels":{"type":"array","items":{"type":"string"},"description":"Updated labels for categorizing and organizing agents."},"name":{"type":"string","description":"Updated display name for the agent."},"visibility":{"enum":["public","shared","private"],"description":"**Technical Preview; added in 9.4.0.** Updated visibility setting: `public` (any privileged user can read/write), `shared` (any privileged user can read, only owner can write), `private` (only owner can read/write)."}}}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-agent-builder-agents-id"}

package/src/kibana/json/put_agent_builder_agents_id_acl.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"entries":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string","description":"Case-sensitive Kibana username of the principal to grant access to."},"role":{"enum":["user","editor","manager"],"description":"Role granted to the principal. Roles are hierarchical: `user` allows viewing, listing, reading, and running the agent; `editor` adds updating the agent and its ACL; `manager` adds deleting the agent and changing visibility."},"type":{"enum":["user"]}},"required":["type","name","role"]},"description":"Access control entries to apply to the agent. Each entry has a `type` (currently only `user` is supported; role-based grants are planned for a future release), a `name` (the principal username), and a `role`. Submitting this field replaces the existing ACL entirely; submit an empty array to clear all grants."}},"required":["entries"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-agent-builder-agents-id-acl"}
+{"type":"object","properties":{"id":{"type":"string","description":"The unique identifier of the agent whose ACL to update.","x-found-in":"path"}},"required":["id"],"allOf":[{"type":"object","properties":{"entries":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string","description":"Case-sensitive Kibana username of the principal to grant access to."},"role":{"enum":["user","editor","manager"],"description":"Role granted to the principal. Roles are hierarchical: `user` allows viewing, listing, reading, and running the agent; `editor` adds updating the agent and its ACL; `manager` adds deleting the agent and changing visibility."},"type":{"enum":["user"]}},"required":["type","name","role"]},"description":"Access control entries to apply to the agent. Each entry has a `type` (currently only `user` is supported; role-based grants are planned for a future release), a `name` (the principal username), and a `role`. Submitting this field replaces the existing ACL entirely; submit an empty array to clear all grants."}},"required":["entries"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-agent-builder-agents-id-acl"}