@elastic/schemas 0.4.4 → 0.5.0

package/src/kibana/json/put_security_entity_store_entities_entitytype.request.json

@@ -1 +1 @@
-{"oneOf":[{"type":"object","properties":{"@timestamp":{"type":"string"},"asset":{"type":"object","properties":{"business_unit":{"type":"string"},"criticality":{"oneOf":[{"enum":["low_impact","medium_impact","high_impact","extreme_impact"]},{}]},"environment":{"type":"string"},"id":{"type":"string"},"model":{"type":"string"},"name":{"type":"string"},"owner":{"type":"string"},"serial_number":{"type":"string"},"vendor":{"type":"string"}}},"entity":{"type":"object","properties":{"attributes":{"type":"object","properties":{"asset":{"type":"boolean"},"known_redirects":{"type":"array","items":{"type":"string"}},"managed":{"type":"boolean"},"mfa_enabled":{"type":"boolean"},"oauth_consent_restriction":{"type":"string"},"permissions":{"type":"array","items":{"type":"string"}},"storage_class":{"type":"string"},"watchlists":{"type":"array","items":{"type":"string"}}}},"behaviors":{"type":"object","properties":{"anomaly_job_ids":{"type":"array","items":{"type":"string"}},"rule_names":{"type":"array","items":{"type":"string"}}}},"EngineMetadata":{"type":"object","properties":{"Type":{"type":"string"}}},"id":{"type":"string"},"lifecycle":{"type":"object","properties":{"first_seen":{"type":"string"},"last_activity":{"type":"string"},"last_seen":{"type":"string"}}},"name":{"type":"string"},"relationships":{"type":"object","properties":{"accesses_frequently":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"accesses_infrequently":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"administers":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"communicates_with":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"depends_on":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"owns":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"owns_inferred":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"resolution":{"type":"object","properties":{"resolved_to":{"type":"string"},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}}}},"supervises":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}}}},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"schema_version":{"type":"string"},"source":{"type":"array","items":{"type":"string"}},"sub_type":{"type":"string"},"type":{"type":"string"},"url":{"type":"string"}}},"event":{"type":"object","properties":{"ingested":{"type":"string"}}},"labels":{"type":"object","properties":{},"additionalProperties":{}},"tags":{"type":"array","items":{"type":"string"}},"user":{"type":"object","properties":{"domain":{"type":"array","items":{"type":"string"}},"email":{"type":"array","items":{"type":"string"}},"full_name":{"type":"array","items":{"type":"string"}},"hash":{"type":"array","items":{"type":"string"}},"id":{"type":"array","items":{"type":"string"}},"name":{"type":"string"},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"roles":{"type":"array","items":{"type":"string"}}}}}},{"type":"object","properties":{"@timestamp":{"type":"string"},"asset":{"type":"object","properties":{"business_unit":{"type":"string"},"criticality":{"oneOf":[{"enum":["low_impact","medium_impact","high_impact","extreme_impact"]},{}]},"environment":{"type":"string"},"id":{"type":"string"},"model":{"type":"string"},"name":{"type":"string"},"owner":{"type":"string"},"serial_number":{"type":"string"},"vendor":{"type":"string"}}},"entity":{"type":"object","properties":{"attributes":{"type":"object","properties":{"asset":{"type":"boolean"},"known_redirects":{"type":"array","items":{"type":"string"}},"managed":{"type":"boolean"},"mfa_enabled":{"type":"boolean"},"oauth_consent_restriction":{"type":"string"},"permissions":{"type":"array","items":{"type":"string"}},"storage_class":{"type":"string"},"watchlists":{"type":"array","items":{"type":"string"}}}},"behaviors":{"type":"object","properties":{"anomaly_job_ids":{"type":"array","items":{"type":"string"}},"rule_names":{"type":"array","items":{"type":"string"}}}},"EngineMetadata":{"type":"object","properties":{"Type":{"type":"string"}}},"id":{"type":"string"},"lifecycle":{"type":"object","properties":{"first_seen":{"type":"string"},"last_activity":{"type":"string"},"last_seen":{"type":"string"}}},"name":{"type":"string"},"relationships":{"type":"object","properties":{"accesses_frequently":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"accesses_infrequently":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"administers":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"communicates_with":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"depends_on":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"owns":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"owns_inferred":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"resolution":{"type":"object","properties":{"resolved_to":{"type":"string"},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}}}},"supervises":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}}}},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"schema_version":{"type":"string"},"source":{"type":"array","items":{"type":"string"}},"sub_type":{"type":"string"},"type":{"type":"string"},"url":{"type":"string"}}},"event":{"type":"object","properties":{"ingested":{"type":"string"}}},"host":{"type":"object","properties":{"architecture":{"type":"array","items":{"type":"string"}},"domain":{"type":"array","items":{"type":"string"}},"hostname":{"type":"array","items":{"type":"string"}},"id":{"type":"array","items":{"type":"string"}},"ip":{"type":"array","items":{"type":"string"}},"mac":{"type":"array","items":{"type":"string"}},"name":{"type":"string"},"os":{"type":"object","properties":{"family":{"type":"string"},"full":{"type":"string"},"kernel":{"type":"string"},"name":{"oneOf":[{"type":"string"},{"type":"array","items":{"type":"string"}}]},"platform":{"type":"string"},"type":{"oneOf":[{"type":"string"},{"type":"array","items":{"type":"string"}}]},"version":{"type":"string"}}},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"type":{"type":"array","items":{"type":"string"}}}},"labels":{"type":"object","properties":{},"additionalProperties":{}},"tags":{"type":"array","items":{"type":"string"}}}},{"type":"object","properties":{"@timestamp":{"type":"string"},"asset":{"type":"object","properties":{"business_unit":{"type":"string"},"criticality":{"oneOf":[{"enum":["low_impact","medium_impact","high_impact","extreme_impact"]},{}]},"environment":{"type":"string"},"id":{"type":"string"},"model":{"type":"string"},"name":{"type":"string"},"owner":{"type":"string"},"serial_number":{"type":"string"},"vendor":{"type":"string"}}},"entity":{"type":"object","properties":{"attributes":{"type":"object","properties":{"asset":{"type":"boolean"},"known_redirects":{"type":"array","items":{"type":"string"}},"managed":{"type":"boolean"},"mfa_enabled":{"type":"boolean"},"oauth_consent_restriction":{"type":"string"},"permissions":{"type":"array","items":{"type":"string"}},"storage_class":{"type":"string"},"watchlists":{"type":"array","items":{"type":"string"}}}},"behaviors":{"type":"object","properties":{"anomaly_job_ids":{"type":"array","items":{"type":"string"}},"rule_names":{"type":"array","items":{"type":"string"}}}},"EngineMetadata":{"type":"object","properties":{"Type":{"type":"string"}}},"id":{"type":"string"},"lifecycle":{"type":"object","properties":{"first_seen":{"type":"string"},"last_activity":{"type":"string"},"last_seen":{"type":"string"}}},"name":{"type":"string"},"relationships":{"type":"object","properties":{"accesses_frequently":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"accesses_infrequently":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"administers":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"communicates_with":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"depends_on":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"owns":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"owns_inferred":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"resolution":{"type":"object","properties":{"resolved_to":{"type":"string"},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}}}},"supervises":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}}}},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"schema_version":{"type":"string"},"source":{"type":"array","items":{"type":"string"}},"sub_type":{"type":"string"},"type":{"type":"string"},"url":{"type":"string"}}},"event":{"type":"object","properties":{"ingested":{"type":"string"}}},"labels":{"type":"object","properties":{},"additionalProperties":{}},"service":{"type":"object","properties":{"address":{"type":"string"},"environment":{"type":"string"},"ephemeral_id":{"type":"string"},"id":{"type":"string"},"name":{"type":"string"},"node":{"type":"object","properties":{"name":{"type":"string"},"role":{"type":"string"},"roles":{"type":"array","items":{"type":"string"}}}},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"state":{"type":"string"},"type":{"type":"string"},"version":{"type":"string"}}},"tags":{"type":"array","items":{"type":"string"}}}},{"type":"object","properties":{"@timestamp":{"type":"string"},"asset":{"type":"object","properties":{"business_unit":{"type":"string"},"criticality":{"oneOf":[{"enum":["low_impact","medium_impact","high_impact","extreme_impact"]},{}]},"environment":{"type":"string"},"id":{"type":"string"},"model":{"type":"string"},"name":{"type":"string"},"owner":{"type":"string"},"serial_number":{"type":"string"},"vendor":{"type":"string"}}},"cloud":{"type":"object","properties":{"account":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"}}},"availability_zone":{"type":"string"},"instance":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"}}},"machine":{"type":"object","properties":{"type":{"type":"string"}}},"project":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"}}},"provider":{"type":"string"},"region":{"type":"string"},"service":{"type":"object","properties":{"name":{"type":"string"}}}}},"entity":{"type":"object","properties":{"attributes":{"type":"object","properties":{"asset":{"type":"boolean"},"known_redirects":{"type":"array","items":{"type":"string"}},"managed":{"type":"boolean"},"mfa_enabled":{"type":"boolean"},"oauth_consent_restriction":{"type":"string"},"permissions":{"type":"array","items":{"type":"string"}},"storage_class":{"type":"string"},"watchlists":{"type":"array","items":{"type":"string"}}}},"behaviors":{"type":"object","properties":{"anomaly_job_ids":{"type":"array","items":{"type":"string"}},"rule_names":{"type":"array","items":{"type":"string"}}}},"EngineMetadata":{"type":"object","properties":{"Type":{"type":"string"}}},"id":{"type":"string"},"lifecycle":{"type":"object","properties":{"first_seen":{"type":"string"},"last_activity":{"type":"string"},"last_seen":{"type":"string"}}},"name":{"type":"string"},"relationships":{"type":"object","properties":{"accesses_frequently":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"accesses_infrequently":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"administers":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"communicates_with":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"depends_on":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"owns":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"owns_inferred":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"resolution":{"type":"object","properties":{"resolved_to":{"type":"string"},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}}}},"supervises":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}}}},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"schema_version":{"type":"string"},"source":{"type":"array","items":{"type":"string"}},"sub_type":{"type":"string"},"type":{"type":"string"},"url":{"type":"string"}}},"event":{"type":"object","properties":{"ingested":{"type":"string"}}},"labels":{"type":"object","properties":{},"additionalProperties":{}},"orchestrator":{"type":"object","properties":{"api_version":{"type":"string"},"cluster":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"url":{"type":"string"},"version":{"type":"string"}}},"namespace":{"type":"string"},"organization":{"type":"string"},"resource":{"type":"object","properties":{"annotation":{"type":"string"},"id":{"type":"string"},"ip":{"type":"string"},"label":{"type":"string"},"name":{"type":"string"},"parent":{"type":"object","properties":{"type":{"type":"string"}}},"type":{"type":"string"}}},"type":{"type":"string"}}},"tags":{"type":"array","items":{"type":"string"}}}}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-security-entity-store-entities-entitytype"}
+{"type":"object","properties":{"entityType":{"type":"string","description":"The entity type to update.","x-found-in":"path"},"force":{"type":"string","description":"When true, allows updating protected fields.","x-found-in":"query"}},"required":["entityType"],"allOf":[{"type":"object","properties":{"@timestamp":{"type":"string"},"asset":{"type":"object","properties":{"business_unit":{"type":"string"},"criticality":{"oneOf":[{"enum":["low_impact","medium_impact","high_impact","extreme_impact"]},{}]},"environment":{"type":"string"},"id":{"type":"string"},"model":{"type":"string"},"name":{"type":"string"},"owner":{"type":"string"},"serial_number":{"type":"string"},"vendor":{"type":"string"}}},"entity":{"type":"object","properties":{"attributes":{"type":"object","properties":{"asset":{"type":"boolean"},"known_redirects":{"type":"array","items":{"type":"string"}},"managed":{"type":"boolean"},"mfa_enabled":{"type":"boolean"},"oauth_consent_restriction":{"type":"string"},"permissions":{"type":"array","items":{"type":"string"}},"storage_class":{"type":"string"},"watchlists":{"type":"array","items":{"type":"string"}}}},"behaviors":{"type":"object","properties":{"anomaly_job_ids":{"type":"array","items":{"type":"string"}},"rule_names":{"type":"array","items":{"type":"string"}}}},"EngineMetadata":{"type":"object","properties":{"Type":{"type":"string"}}},"id":{"type":"string"},"lifecycle":{"type":"object","properties":{"first_seen":{"type":"string"},"last_activity":{"type":"string"},"last_seen":{"type":"string"}}},"name":{"type":"string"},"relationships":{"type":"object","properties":{"accesses_frequently":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"accesses_infrequently":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"administers":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"communicates_with":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"depends_on":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"owns":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"owns_inferred":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}},"resolution":{"type":"object","properties":{"resolved_to":{"type":"string"},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}}}},"supervises":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"}},"raw_identifiers":{"type":"object","properties":{"entity.id":{"type":"array","items":{"type":"string"}},"host.id":{"type":"array","items":{"type":"string"}},"host.name":{"type":"array","items":{"type":"string"}},"service.name":{"type":"array","items":{"type":"string"}},"user.email":{"type":"array","items":{"type":"string"}},"user.id":{"type":"array","items":{"type":"string"}},"user.name":{"type":"array","items":{"type":"string"}}}}}}}},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"schema_version":{"type":"string"},"source":{"type":"array","items":{"type":"string"}},"sub_type":{"type":"string"},"type":{"type":"string"},"url":{"type":"string"}}},"event":{"type":"object","properties":{"ingested":{"type":"string"}}},"labels":{"type":"object","properties":{},"additionalProperties":{}},"tags":{"type":"array","items":{"type":"string"}},"user":{"type":"object","properties":{"domain":{"type":"array","items":{"type":"string"}},"email":{"type":"array","items":{"type":"string"}},"full_name":{"type":"array","items":{"type":"string"}},"hash":{"type":"array","items":{"type":"string"}},"id":{"type":"array","items":{"type":"string"}},"name":{"type":"string"},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"roles":{"type":"array","items":{"type":"string"}}}},"host":{"type":"object","properties":{"architecture":{"type":"array","items":{"type":"string"}},"domain":{"type":"array","items":{"type":"string"}},"hostname":{"type":"array","items":{"type":"string"}},"id":{"type":"array","items":{"type":"string"}},"ip":{"type":"array","items":{"type":"string"}},"mac":{"type":"array","items":{"type":"string"}},"name":{"type":"string"},"os":{"type":"object","properties":{"family":{"type":"string"},"full":{"type":"string"},"kernel":{"type":"string"},"name":{"oneOf":[{"type":"string"},{"type":"array","items":{"type":"string"}}]},"platform":{"type":"string"},"type":{"oneOf":[{"type":"string"},{"type":"array","items":{"type":"string"}}]},"version":{"type":"string"}}},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"type":{"type":"array","items":{"type":"string"}}}},"service":{"type":"object","properties":{"address":{"type":"string"},"environment":{"type":"string"},"ephemeral_id":{"type":"string"},"id":{"type":"string"},"name":{"type":"string"},"node":{"type":"object","properties":{"name":{"type":"string"},"role":{"type":"string"},"roles":{"type":"array","items":{"type":"string"}}}},"risk":{"type":"object","properties":{"calculated_level":{"enum":["Unknown","Low","Moderate","High","Critical"]},"calculated_score":{"type":"number"},"calculated_score_norm":{"type":"number"}}},"state":{"type":"string"},"type":{"type":"string"},"version":{"type":"string"}}},"cloud":{"type":"object","properties":{"account":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"}}},"availability_zone":{"type":"string"},"instance":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"}}},"machine":{"type":"object","properties":{"type":{"type":"string"}}},"project":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"}}},"provider":{"type":"string"},"region":{"type":"string"},"service":{"type":"object","properties":{"name":{"type":"string"}}}}},"orchestrator":{"type":"object","properties":{"api_version":{"type":"string"},"cluster":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"url":{"type":"string"},"version":{"type":"string"}}},"namespace":{"type":"string"},"organization":{"type":"string"},"resource":{"type":"object","properties":{"annotation":{"type":"string"},"id":{"type":"string"},"ip":{"type":"string"},"label":{"type":"string"},"name":{"type":"string"},"parent":{"type":"object","properties":{"type":{"type":"string"}}},"type":{"type":"string"}}},"type":{"type":"string"}}}}}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-security-entity-store-entities-entitytype"}

package/src/kibana/json/put_security_role_name.request.json

@@ -1 +1 @@
-{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_security_role_put_payload","$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-security-role-name"}
+{"type":"object","properties":{"name":{"type":"string","description":"The role name.","x-found-in":"path"},"createOnly":{"type":"boolean","description":"When true, a role is not overwritten if it already exists.","x-found-in":"query"}},"required":["name"],"allOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_security_role_put_payload"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-security-role-name"}

package/src/kibana/json/put_spaces_space_id.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"_reserved":{"type":"boolean"},"color":{"type":"string","description":"The hexadecimal color code used in the space avatar. By default, the color is automatically generated from the space name."},"description":{"type":"string","description":"A description for the space."},"disabledFeatures":{"type":"array","items":{"type":"string"}},"id":{"type":"string","description":"The space ID that is part of the Kibana URL when inside the space. Space IDs are limited to lowercase alphanumeric, underscore, and hyphen characters (a-z, 0-9, _, and -). You are cannot change the ID with the update operation."},"imageUrl":{"type":"string","description":"The data-URL encoded image to display in the space avatar. If specified, initials will not be displayed and the color will be visible as the background color for transparent images. For best results, your image should be 64x64. Images will not be optimized by this API call, so care should be taken when using custom images."},"initials":{"type":"string","description":"One or two characters that are shown in the space avatar. By default, the initials are automatically generated from the space name."},"name":{"type":"string","description":"The display name for the space. "},"projectRouting":{"type":"string","description":"Cross-project search default routing configuration for this space. Controls whether searches are scoped to a single project or span multiple projects in serverless environments."}},"required":["id","name"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-spaces-space-id"}
+{"type":"object","properties":{"id":{"type":"string","description":"The space identifier. You are unable to change the ID with the update operation.","x-found-in":"path"}},"required":["id"],"allOf":[{"type":"object","properties":{"_reserved":{"type":"boolean"},"color":{"type":"string","description":"The hexadecimal color code used in the space avatar. By default, the color is automatically generated from the space name."},"description":{"type":"string","description":"A description for the space."},"disabledFeatures":{"type":"array","items":{"type":"string"}},"id":{"type":"string","description":"The space ID that is part of the Kibana URL when inside the space. Space IDs are limited to lowercase alphanumeric, underscore, and hyphen characters (a-z, 0-9, _, and -). You are cannot change the ID with the update operation."},"imageUrl":{"type":"string","description":"The data-URL encoded image to display in the space avatar. If specified, initials will not be displayed and the color will be visible as the background color for transparent images. For best results, your image should be 64x64. Images will not be optimized by this API call, so care should be taken when using custom images."},"initials":{"type":"string","description":"One or two characters that are shown in the space avatar. By default, the initials are automatically generated from the space name."},"name":{"type":"string","description":"The display name for the space. "},"projectRouting":{"type":"string","description":"Cross-project search default routing configuration for this space. Controls whether searches are scoped to a single project or span multiple projects in serverless environments."}},"required":["id","name"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-spaces-space-id"}

package/src/kibana/json/put_streams_name.request.json

@@ -1 +1 @@
-{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_StreamUpsertRequest","$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-streams-name"}
+{"type":"object","properties":{"name":{"type":"string","description":"The name of the stream.","x-found-in":"path"}},"required":["name"],"allOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_StreamUpsertRequest"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-streams-name"}

package/src/kibana/json/put_streams_name_ingest.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"ingest":{"oneOf":[{"type":"object","properties":{"failure_store":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_FailureStore"},"lifecycle":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_IngestStreamLifecycle"},"processing":{"type":"object","properties":{"steps":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_StreamlangStep"}},"updated_at":{}},"required":["steps"]},"settings":{"type":"object","properties":{"index.number_of_replicas":{"type":"object","properties":{"value":{"type":"number"}},"required":["value"]},"index.number_of_shards":{"type":"object","properties":{"value":{"type":"number"}},"required":["value"]},"index.refresh_interval":{"type":"object","properties":{"value":{"oneOf":[{"type":"string"},{"enum":[-1]}]}},"required":["value"]}}},"wired":{"type":"object","properties":{"draft":{"type":"boolean"},"fields":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_FieldDefinition"},"routing":{"type":"array","items":{"type":"object","properties":{"destination":{"type":"string","description":"A non-empty string."},"draft":{"type":"boolean"},"status":{"enum":["enabled","disabled"]},"where":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_Condition"}},"required":["destination","where"]}}},"required":["fields","routing"]}},"required":["lifecycle","processing","settings","failure_store","wired"]},{"type":"object","properties":{"classic":{"type":"object","properties":{"field_overrides":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_ClassicFieldDefinition"}}},"failure_store":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_FailureStore"},"lifecycle":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_IngestStreamLifecycle"},"processing":{"type":"object","properties":{"steps":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_StreamlangStep"}},"updated_at":{}},"required":["steps"]},"settings":{"type":"object","properties":{"index.number_of_replicas":{"type":"object","properties":{"value":{"type":"number"}},"required":["value"]},"index.number_of_shards":{"type":"object","properties":{"value":{"type":"number"}},"required":["value"]},"index.refresh_interval":{"type":"object","properties":{"value":{"oneOf":[{"type":"string"},{"enum":[-1]}]}},"required":["value"]}}}},"required":["lifecycle","processing","settings","failure_store","classic"]}]}},"required":["ingest"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-streams-name-ingest"}
+{"type":"object","properties":{"name":{"type":"string","description":"The name of the stream.","x-found-in":"path"}},"required":["name"],"allOf":[{"type":"object","properties":{"ingest":{"oneOf":[{"type":"object","properties":{"failure_store":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_FailureStore"},"lifecycle":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_IngestStreamLifecycle"},"processing":{"type":"object","properties":{"steps":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_StreamlangStep"}},"updated_at":{}},"required":["steps"]},"settings":{"type":"object","properties":{"index.number_of_replicas":{"type":"object","properties":{"value":{"type":"number"}},"required":["value"]},"index.number_of_shards":{"type":"object","properties":{"value":{"type":"number"}},"required":["value"]},"index.refresh_interval":{"type":"object","properties":{"value":{"oneOf":[{"type":"string"},{"enum":[-1]}]}},"required":["value"]}}},"wired":{"type":"object","properties":{"draft":{"type":"boolean"},"fields":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_FieldDefinition"},"routing":{"type":"array","items":{"type":"object","properties":{"destination":{"type":"string","description":"A non-empty string."},"draft":{"type":"boolean"},"status":{"enum":["enabled","disabled"]},"where":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_Condition"}},"required":["destination","where"]}}},"required":["fields","routing"]}},"required":["lifecycle","processing","settings","failure_store","wired"]},{"type":"object","properties":{"classic":{"type":"object","properties":{"field_overrides":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_ClassicFieldDefinition"}}},"failure_store":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_FailureStore"},"lifecycle":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_IngestStreamLifecycle"},"processing":{"type":"object","properties":{"steps":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_StreamlangStep"}},"updated_at":{}},"required":["steps"]},"settings":{"type":"object","properties":{"index.number_of_replicas":{"type":"object","properties":{"value":{"type":"number"}},"required":["value"]},"index.number_of_shards":{"type":"object","properties":{"value":{"type":"number"}},"required":["value"]},"index.refresh_interval":{"type":"object","properties":{"value":{"oneOf":[{"type":"string"},{"enum":[-1]}]}},"required":["value"]}}}},"required":["lifecycle","processing","settings","failure_store","classic"]}]}},"required":["ingest"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-streams-name-ingest"}

package/src/kibana/json/put_streams_name_queries_queryid.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"description":{"type":"string"},"esql":{"type":"object","properties":{"query":{"type":"string"}},"required":["query"]},"evidence":{"type":"array","items":{"type":"string"}},"severity_score":{"type":"number"},"title":{"type":"string","description":"A non-empty string."}},"required":["title","esql"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-streams-name-queries-queryid"}
+{"type":"object","properties":{"name":{"type":"string","description":"The name of the stream.","x-found-in":"path"},"queryId":{"type":"string","description":"The identifier of the query.","x-found-in":"path"}},"required":["name","queryId"],"allOf":[{"type":"object","properties":{"description":{"type":"string"},"esql":{"type":"object","properties":{"query":{"type":"string"}},"required":["query"]},"evidence":{"type":"array","items":{"type":"string"}},"severity_score":{"type":"number"},"title":{"type":"string","description":"A non-empty string."}},"required":["title","esql"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-streams-name-queries-queryid"}

package/src/kibana/json/put_streams_name_query.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"field_descriptions":{"type":"object","additionalProperties":{"type":"string"}},"query":{"type":"object","properties":{"esql":{"type":"string"}},"required":["esql"]}},"required":["query"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-streams-name-query"}
+{"type":"object","properties":{"name":{"type":"string","description":"The name of the query stream.","x-found-in":"path"}},"required":["name"],"allOf":[{"type":"object","properties":{"field_descriptions":{"type":"object","additionalProperties":{"type":"string"}},"query":{"type":"object","properties":{"esql":{"type":"string"}},"required":["esql"]}},"required":["query"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-streams-name-query"}

package/src/kibana/json/put_streams_streamname_attachments_attachmenttype_attachmentid.request.json

@@ -1 +1 @@
-{"oneOf":[{"type":"object","properties":{}},{},{}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-streams-streamname-attachments-attachmenttype-attachmentid"}
+{"type":"object","properties":{"streamName":{"type":"string","description":"The name of the stream","x-found-in":"path"},"attachmentType":{"type":"string","description":"The type of the attachment","x-found-in":"path"},"attachmentId":{"type":"string","description":"The ID of the attachment","x-found-in":"path"}},"required":["streamName","attachmentType","attachmentId"],"allOf":[{"type":"object"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-streams-streamname-attachments-attachmenttype-attachmentid"}

package/src/kibana/json/put_tags_id.request.json

@@ -1 +1 @@
-{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_kbn-tags-request-attributes","$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-tags-id"}
+{"type":"object","properties":{"id":{"type":"string","description":"The tag ID, as returned by the create or search endpoints.","x-found-in":"path"}},"required":["id"],"allOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_kbn-tags-request-attributes"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-tags-id"}

package/src/kibana/json/put_workflows_managed_workflow_id.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"description":{"type":"string"},"enabled":{"type":"boolean"},"name":{"type":"string"},"tags":{"type":"array","items":{"type":"string"}},"yaml":{"type":"string"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-workflows-managed-workflow-id"}
+{"type":"object","properties":{"id":{"type":"string","description":"Workflow ID","x-found-in":"path"}},"required":["id"],"allOf":[{"type":"object","properties":{"description":{"type":"string"},"enabled":{"type":"boolean"},"name":{"type":"string"},"tags":{"type":"array","items":{"type":"string"}},"yaml":{"type":"string"}}}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-workflows-managed-workflow-id"}

package/src/kibana/json/put_workflows_workflow_id.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"description":{"type":"string"},"enabled":{"type":"boolean"},"name":{"type":"string"},"tags":{"type":"array","items":{"type":"string"}},"yaml":{"type":"string"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-workflows-workflow-id"}
+{"type":"object","properties":{"id":{"type":"string","description":"Workflow ID","x-found-in":"path"}},"required":["id"],"allOf":[{"type":"object","properties":{"description":{"type":"string"},"enabled":{"type":"boolean"},"name":{"type":"string"},"tags":{"type":"array","items":{"type":"string"}},"yaml":{"type":"string"}}}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-workflows-workflow-id"}

package/src/kibana/json/read_conversation.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"id":{"type":"string","description":"The conversation's `id` value, a unique identifier for the conversation.","x-found-in":"path"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadConversation"}

package/src/kibana/json/read_endpoint_list_item.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"id":{"type":"string","description":"Either `id` or `item_id` must be specified","x-found-in":"query"},"item_id":{"type":"string","description":"Either `id` or `item_id` must be specified","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadEndpointListItem"}

package/src/kibana/json/read_exception_list.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"id":{"type":"string","description":"Exception list's identifier. Either `id` or `list_id` must be specified.","x-found-in":"query"},"list_id":{"type":"string","description":"Human readable exception list string identifier, e.g. `trusted-linux-processes`. Either `id` or `list_id` must be specified.","x-found-in":"query"},"namespace_type":{"type":"string","description":"When `single`, the list is resolved in the current Kibana space. When `agnostic`, the list is a global","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadExceptionList"}

package/src/kibana/json/read_exception_list_item.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"id":{"type":"string","description":"Exception list item's identifier. Either `id` or `item_id` must be specified.","x-found-in":"query"},"item_id":{"type":"string","description":"Human readable exception item string identifier, e.g. `trusted-linux-processes`. Either `id` or `item_id` must be specified.","x-found-in":"query"},"namespace_type":{"type":"string","description":"`single` fetches the item in the current space; `agnostic` fetches a global (space-agnostic) item. Must","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadExceptionListItem"}

package/src/kibana/json/read_exception_list_summary.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"id":{"type":"string","description":"Exception list's identifier generated upon creation.","x-found-in":"query"},"list_id":{"type":"string","description":"Exception list's human readable identifier.","x-found-in":"query"},"namespace_type":{"type":"string","description":"`single` returns summary for a list in the current space; `agnostic` for a space-agnostic list. Must","x-found-in":"query"},"filter":{"type":"string","description":"Search filter clause","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadExceptionListSummary"}

package/src/kibana/json/read_knowledge_base.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"resource":{"type":"string","description":"The KnowledgeBase `resource` value.","x-found-in":"path"}},"required":["resource"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadKnowledgeBase"}

package/src/kibana/json/read_knowledge_base_entry.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (`id`) of the Knowledge Base Entry to retrieve.","x-found-in":"path"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadKnowledgeBaseEntry"}

package/src/kibana/json/read_list.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"id":{"type":"string","description":"Value list identifier (`id`) returned when the list was created.","x-found-in":"query"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadList"}

package/src/kibana/json/read_list_item.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"id":{"type":"string","description":"Value list item identifier. Required if `list_id` and `value` are not specified.","x-found-in":"query"},"list_id":{"type":"string","description":"Value list item list's `id` identfier. Required if `id` is not specified.","x-found-in":"query"},"value":{"type":"string","description":"The value used to evaluate exceptions. Required if `id` is not specified.","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadListItem"}

package/src/kibana/json/read_rule.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"id":{"type":"string","description":"The rule's `id` value.","x-found-in":"query"},"rule_id":{"type":"string","description":"The rule's `rule_id` value.","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadRule"}

package/src/kibana/json/reset_slo_op.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"spaceId":{"type":"string","description":"The spaceId parameter","x-found-in":"path"},"sloId":{"type":"string","description":"The sloId parameter","x-found-in":"path"}},"required":["spaceId","sloId"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"resetSloOp"}

package/src/kibana/json/resolve_timeline.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"template_timeline_id":{"type":"string","description":"The ID of the template timeline to resolve","x-found-in":"query"},"id":{"type":"string","description":"The ID of the timeline to resolve","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ResolveTimeline"}

package/src/kibana/json/rule_preview.request.json

@@ -1 +1 @@
-{"oneOf":[{"oneOf":[{"type":"object"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_EqlRuleCreateProps"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_RulePreviewParams"}]},{"oneOf":[{"type":"object"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_QueryRuleCreateProps"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_RulePreviewParams"}]},{"oneOf":[{"type":"object"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_SavedQueryRuleCreateProps"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_RulePreviewParams"}]},{"oneOf":[{"type":"object"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_ThresholdRuleCreateProps"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_RulePreviewParams"}]},{"oneOf":[{"type":"object"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_ThreatMatchRuleCreateProps"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_RulePreviewParams"}]},{"oneOf":[{"type":"object"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_MachineLearningRuleCreateProps"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_RulePreviewParams"}]},{"oneOf":[{"type":"object"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_NewTermsRuleCreateProps"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_RulePreviewParams"}]},{"oneOf":[{"type":"object"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_EsqlRuleCreateProps"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_RulePreviewParams"}]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"RulePreview"}
+{"type":"object","properties":{"enable_logged_requests":{"type":"boolean","description":"Enables logging and returning in response ES queries, performed during rule execution","x-found-in":"query"}},"allOf":[{"type":"object"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"RulePreview"}

package/src/kibana/json/set_alerts_status.request.json

@@ -1 +1 @@
-{"oneOf":[{"$ref":"./_defs.json#/$defs/Security_Detections_API_SetAlertsStatusByIds"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_SetAlertsStatusByQuery"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"SetAlertsStatus"}
+{"type":"object","properties":{"reason":{"$ref":"./_defs.json#/$defs/Security_Detections_API_Reason"},"signal_ids":{"type":"array","items":{"type":"string"},"description":"List of alert ids. Use field `_id` on alert document or `kibana.alert.uuid`. Note: signals are a deprecated term for alerts."},"status":{"$ref":"./_defs.json#/$defs/Security_Detections_API_AlertStatusExceptClosed"},"conflicts":{"enum":["abort","proceed"]},"query":{"type":"object","additionalProperties":true}},"required":["status"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"SetAlertsStatus"}

package/src/kibana/json/start_entity_engine.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"entityType":{"type":"string","description":"The entity type of the engine to start.","x-found-in":"path"}},"required":["entityType"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"StartEntityEngine"}

package/src/kibana/json/stop_entity_engine.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"entityType":{"type":"string","description":"The entity type of the engine to stop.","x-found-in":"path"}},"required":["entityType"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"StopEntityEngine"}

package/src/kibana/json/unassign_watchlist_entities.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"euids":{"type":"array","items":{"type":"string"},"description":"The EUIDs of the entities to unassign"}},"required":["euids"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UnassignWatchlistEntities"}
+{"type":"object","properties":{"watchlist_id":{"type":"string","description":"The ID of the watchlist to remove entities from","x-found-in":"path"}},"required":["watchlist_id"],"allOf":[{"type":"object","properties":{"euids":{"type":"array","items":{"type":"string"},"description":"The EUIDs of the entities to unassign"}},"required":["euids"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UnassignWatchlistEntities"}

package/src/kibana/json/update_attack_discovery_schedules.request.json

@@ -1 +1 @@
-{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiScheduleUpdateProps","$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateAttackDiscoverySchedules"}
+{"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (UUID) of the Attack Discovery schedule to update. This ID is returned when creating a schedule and can be found in schedule listings.","x-found-in":"path"}},"required":["id"],"allOf":[{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiScheduleUpdateProps"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateAttackDiscoverySchedules"}

package/src/kibana/json/update_conversation.request.json

@@ -1 +1 @@
-{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_ConversationUpdateProps","$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateConversation"}
+{"type":"object","properties":{"id":{"type":"string","description":"The conversation's `id` value.","x-found-in":"path"}},"required":["id"],"allOf":[{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_ConversationUpdateProps"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateConversation"}

package/src/kibana/json/update_dashboard_redirect.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"id":{"type":"string","description":"The id parameter","x-found-in":"path"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"update-dashboard-redirect"}

package/src/kibana/json/update_data_view_default.request.json

@@ -1 +1 @@
-{"$ref":"./_defs.json#/$defs/Data_views_update_data_view_request_object","$schema":"https://json-schema.org/draft/2020-12/schema","title":"updateDataViewDefault"}
+{"type":"object","properties":{"viewId":{"type":"string","description":"The viewId parameter","x-found-in":"path"}},"required":["viewId"],"allOf":[{"$ref":"./_defs.json#/$defs/Data_views_update_data_view_request_object"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"updateDataViewDefault"}

package/src/kibana/json/update_exception_list_item.request.json

@@ -1 +1 @@
-{"oneOf":[{"$ref":"./_defs.json#/$defs/Security_Exceptions_API_UpdateExceptionListItemGeneric"},{"$ref":"./_defs.json#/$defs/Security_Exceptions_API_UpdateExceptionListItemEndpointList"},{"$ref":"./_defs.json#/$defs/Security_Exceptions_API_UpdateExceptionListItemTrustedAppsWindows"},{"$ref":"./_defs.json#/$defs/Security_Exceptions_API_UpdateExceptionListItemTrustedAppsMac"},{"$ref":"./_defs.json#/$defs/Security_Exceptions_API_UpdateExceptionListItemTrustedAppsLinux"},{"$ref":"./_defs.json#/$defs/Security_Exceptions_API_UpdateExceptionListItemTrustedDevicesWindows"},{"$ref":"./_defs.json#/$defs/Security_Exceptions_API_UpdateExceptionListItemTrustedDevicesMac"},{"$ref":"./_defs.json#/$defs/Security_Exceptions_API_UpdateExceptionListItemTrustedDevicesWindowsMac"},{"$ref":"./_defs.json#/$defs/Security_Exceptions_API_UpdateExceptionListItemEventFilters"},{"$ref":"./_defs.json#/$defs/Security_Exceptions_API_UpdateExceptionListItemHostIsolation"},{"$ref":"./_defs.json#/$defs/Security_Exceptions_API_UpdateExceptionListItemBlocklistWindows"},{"$ref":"./_defs.json#/$defs/Security_Exceptions_API_UpdateExceptionListItemBlocklistLinux"},{"$ref":"./_defs.json#/$defs/Security_Exceptions_API_UpdateExceptionListItemBlocklistMac"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateExceptionListItem"}
+{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateExceptionListItem"}

package/src/kibana/json/update_fields_metadata_default.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"fields":{"type":"object","description":"The field object."}},"required":["fields"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"updateFieldsMetadataDefault"}
+{"type":"object","properties":{"viewId":{"type":"string","description":"The viewId parameter","x-found-in":"path"}},"required":["viewId"],"allOf":[{"type":"object","properties":{"fields":{"type":"object","description":"The field object."}},"required":["fields"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"updateFieldsMetadataDefault"}

package/src/kibana/json/update_knowledge_base_entry.request.json

@@ -1 +1 @@
-{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseEntryUpdateRouteProps","$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateKnowledgeBaseEntry"}
+{"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (`id`) of the Knowledge Base Entry to update.","x-found-in":"path"}},"required":["id"],"allOf":[{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseEntryUpdateRouteProps"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateKnowledgeBaseEntry"}

package/src/kibana/json/update_priv_mon_user.request.json

@@ -1 +1 @@
-{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_MonitoredUserUpdateDoc","$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdatePrivMonUser"}
+{"type":"object","properties":{"id":{"type":"string","description":"The document ID of the monitored user to update","x-found-in":"path"}},"required":["id"],"allOf":[{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_MonitoredUserUpdateDoc"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdatePrivMonUser"}

package/src/kibana/json/update_runtime_field_default.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"runtimeField":{"type":"object","description":"The runtime field definition object.\n\nYou can update following fields:\n\n- `type`\n- `script`\n"}},"required":["runtimeField"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"updateRuntimeFieldDefault"}
+{"type":"object","properties":{"viewId":{"type":"string","description":"The viewId parameter","x-found-in":"path"},"fieldName":{"type":"string","description":"The fieldName parameter","x-found-in":"path"}},"required":["viewId","fieldName"],"allOf":[{"type":"object","properties":{"runtimeField":{"type":"object","description":"The runtime field definition object.\n\nYou can update following fields:\n\n- `type`\n- `script`\n"}},"required":["runtimeField"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"updateRuntimeFieldDefault"}

package/src/kibana/json/update_slo_op.request.json

@@ -1 +1 @@
-{"$ref":"./_defs.json#/$defs/SLOs_update_slo_request","$schema":"https://json-schema.org/draft/2020-12/schema","title":"updateSloOp"}
+{"type":"object","properties":{"spaceId":{"type":"string","description":"The spaceId parameter","x-found-in":"path"},"sloId":{"type":"string","description":"The sloId parameter","x-found-in":"path"}},"required":["spaceId","sloId"],"allOf":[{"$ref":"./_defs.json#/$defs/SLOs_update_slo_request"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"updateSloOp"}

package/src/kibana/json/update_visualization_redirect.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"id":{"type":"string","description":"The id parameter","x-found-in":"path"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"update-visualization-redirect"}

package/src/kibana/json/update_watchlist.request.json

@@ -1 +1 @@
-{"type":"object","properties":{"description":{"type":"string","description":"Description of the watchlist"},"managed":{"type":"boolean","description":"Indicates if the watchlist is managed by the system"},"name":{"type":"string","description":"Unique name of the watchlist"},"riskModifier":{"type":"number","description":"Risk score modifier associated with the watchlist"}},"required":["name","riskModifier"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateWatchlist"}
+{"type":"object","properties":{"id":{"type":"string","description":"The ID of the watchlist to update","x-found-in":"path"}},"required":["id"],"allOf":[{"type":"object","properties":{"description":{"type":"string","description":"Description of the watchlist"},"managed":{"type":"boolean","description":"Indicates if the watchlist is managed by the system"},"name":{"type":"string","description":"Unique name of the watchlist"},"riskModifier":{"type":"number","description":"Risk score modifier associated with the watchlist"}},"required":["name","riskModifier"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateWatchlist"}

package/src/kibana/json/upload_watchlist_csv.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"watchlist_id":{"type":"string","description":"The ID of the watchlist to add entities to","x-found-in":"path"}},"required":["watchlist_id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UploadWatchlistCsv"}

package/src/kibana/json/upsert_entities_bulk.request.json

@@ -1 +1 @@
-{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EntitiesContainer","$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpsertEntitiesBulk"}
+{"type":"object","properties":{"force":{"type":"boolean","description":"When true, allows updating protected fields.","x-found-in":"query"}},"allOf":[{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EntitiesContainer"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpsertEntitiesBulk"}

package/src/kibana/json/upsert_entity.request.json

@@ -1 +1 @@
-{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_Entity","$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpsertEntity"}
+{"type":"object","properties":{"entityType":{"type":"string","description":"","x-found-in":"path"},"force":{"type":"boolean","description":"When true, allows updating protected fields.","x-found-in":"query"}},"required":["entityType"],"allOf":[{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_Entity"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpsertEntity"}

package/src/serverless/json/get_traffic_filter_metadata.response.json

@@ -12,7 +12,11 @@
             "type": "string"
           },
           "csp": {
-            "type": "string"
+            "enum": [
+              "aws",
+              "azure",
+              "gcp"
+            ]
           },
           "vpc_service_name": {
             "type": "string"
@@ -44,7 +48,8 @@
         },
         "required": [
           "region",
-          "vpc_service_name",
+          "csp",
+          "private_service_name",
           "private_hosted_zone_domain_name",
           "availability_zones"
         ]

package/lib/cjs/kibana/tools/apis/agent-builder.d.ts

@@ -1,3 +0,0 @@
-import type { KbApiDefinition } from '../types.ts';
-export declare const agentBuilderDefinitions: KbApiDefinition[];
-//# sourceMappingURL=agent-builder.d.ts.map

package/lib/cjs/kibana/tools/apis/agent-builder.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-builder.d.ts","sourceRoot":"","sources":["../../../../../src/kibana/tools/apis/agent-builder.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD,eAAO,MAAM,uBAAuB,EAAE,eAAe,EA6VpD,CAAA"}