@elastic/schemas 0.4.4 → 0.5.0

package/lib/cjs/es/json/text_structure.find_structure.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "text_structure.find_structure", "type": "object", "properties": { "charset": { "type": "string", "description": "The text's character set.\nIt must be a character set that is supported by the JVM that Elasticsearch uses.\nFor example, `UTF-8`, `UTF-16LE`, `windows-1252`, or `EUC-JP`.\nIf this parameter is not specified, the structure finder chooses an appropriate character set.", "x-found-in": "query" }, "column_names": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }], "description": "If you have set format to `delimited`, you can specify the column names in a comma-separated list.\nIf this parameter is not specified, the structure finder uses the column names from the header row of the text.\nIf the text does not have a header role, columns are named \"column1\", \"column2\", \"column3\", for example.", "x-found-in": "query" }, "delimiter": { "type": "string", "description": "If you have set `format` to `delimited`, you can specify the character used to delimit the values in each row.\nOnly a single character is supported; the delimiter cannot have multiple characters.\nBy default, the API considers the following possibilities: comma, tab, semi-colon, and pipe (`|`).\nIn this default scenario, all rows must have the same number of fields for the delimited format to be detected.\nIf you specify a delimiter, up to 10% of the rows can have a different number of columns than the first row.", "x-found-in": "query" }, "ecs_compatibility": { "type": "string", "description": "The mode of compatibility with ECS compliant Grok patterns.\nUse this parameter to specify whether to use ECS Grok patterns instead of legacy ones when the structure finder creates a Grok pattern.\nValid values are `disabled` and `v1`.\nThis setting primarily has an impact when a whole message Grok pattern such as `%{CATALINALOG}` matches the input.\nIf the structure finder identifies a common structure but has no idea of meaning then generic field names such as `path`, `ipaddress`, `field1`, and `field2` are used in the `grok_pattern` output, with the intention that a user who knows the meanings rename these fields before using it.", "x-found-in": "query" }, "explain": { "type": "boolean", "description": "If this parameter is set to `true`, the response includes a field named explanation, which is an array of strings that indicate how the structure finder produced its result.\nIf the structure finder produces unexpected results for some text, use this query parameter to help you determine why the returned structure was chosen.", "x-found-in": "query" }, "format": { "$ref": "./text_structure.find_structure.json#/$defs/text_structure.find_structure__FindStructureFormat", "description": "The high level structure of the text.\nValid values are `ndjson`, `xml`, `delimited`, and `semi_structured_text`.\nBy default, the API chooses the format.\nIn this default scenario, all rows must have the same number of fields for a delimited format to be detected.\nIf the format is set to `delimited` and the delimiter is not set, however, the API tolerates up to 5% of rows that have a different number of columns than the first row.", "x-found-in": "query" }, "grok_pattern": { "type": "string", "description": "If you have set `format` to `semi_structured_text`, you can specify a Grok pattern that is used to extract fields from every message in the text.\nThe name of the timestamp field in the Grok pattern must match what is specified in the `timestamp_field` parameter.\nIf that parameter is not specified, the name of the timestamp field in the Grok pattern must match \"timestamp\".\nIf `grok_pattern` is not specified, the structure finder creates a Grok pattern.", "x-found-in": "query" }, "has_header_row": { "type": "boolean", "description": "If you have set `format` to `delimited`, you can use this parameter to indicate whether the column names are in the first row of the text.\nIf this parameter is not specified, the structure finder guesses based on the similarity of the first row of the text to other rows.", "x-found-in": "query" }, "line_merge_size_limit": { "type": "number", "description": "The maximum number of characters in a message when lines are merged to form messages while analyzing semi-structured text.\nIf you have extremely long messages you may need to increase this, but be aware that this may lead to very long processing times if the way to group lines into messages is misdetected.", "x-found-in": "query" }, "lines_to_sample": { "type": "number", "description": "The number of lines to include in the structural analysis, starting from the beginning of the text.\nThe minimum is 2.\nIf the value of this parameter is greater than the number of lines in the text, the analysis proceeds (as long as there are at least two lines in the text) for all of the lines.\n\nNOTE: The number of lines and the variation of the lines affects the speed of the analysis.\nFor example, if you upload text where the first 1000 lines are all variations on the same message, the analysis will find more commonality than would be seen with a bigger sample.\nIf possible, however, it is more efficient to upload sample text with more variety in the first 1000 lines than to request analysis of 100000 lines to achieve some variety.", "x-found-in": "query" }, "quote": { "type": "string", "description": "If you have set `format` to `delimited`, you can specify the character used to quote the values in each row if they contain newlines or the delimiter character.\nOnly a single character is supported.\nIf this parameter is not specified, the default value is a double quote (`\"`).\nIf your delimited text format does not use quoting, a workaround is to set this argument to a character that does not appear anywhere in the sample.", "x-found-in": "query" }, "should_trim_fields": { "type": "boolean", "description": "If you have set `format` to `delimited`, you can specify whether values between delimiters should have whitespace trimmed from them.\nIf this parameter is not specified and the delimiter is pipe (`|`), the default value is `true`.\nOtherwise, the default value is `false`.", "x-found-in": "query" }, "should_parse_recursively": { "type": "boolean", "description": "If the format is `ndjson`, you can specify whether to parse nested JSON objects recursively.\nThe nested objects are parsed to a maximum depth equal to the default value of the `index.mapping.depth.limit` setting.\nAnything beyond that depth is parsed as an `object` type field.\nFor formats other than `ndjson`, this parameter is ignored.", "x-found-in": "query" }, "timeout": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "The maximum amount of time that the structure analysis can take.\nIf the analysis is still running when the timeout expires then it will be stopped.", "x-found-in": "query" }, "timestamp_field": { "type": "string", "description": "The name of the field that contains the primary timestamp of each record in the text.\nIn particular, if the text were ingested into an index, this is the field that would be used to populate the `@timestamp` field.\n\nIf the `format` is `semi_structured_text`, this field must match the name of the appropriate extraction in the `grok_pattern`.\nTherefore, for semi-structured text, it is best not to specify this parameter unless `grok_pattern` is also specified.\n\nFor structured text, if you specify this parameter, the field must exist within the text.\n\nIf this parameter is not specified, the structure finder makes a decision about which field (if any) is the primary timestamp field.\nFor structured text, it is not compulsory to have a timestamp in the text.", "x-found-in": "query" }, "timestamp_format": { "type": "string", "description": "The Java time format of the timestamp field in the text.\n\nOnly a subset of Java time format letter groups are supported:\n\n* `a`\n* `d`\n* `dd`\n* `EEE`\n* `EEEE`\n* `H`\n* `HH`\n* `h`\n* `M`\n* `MM`\n* `MMM`\n* `MMMM`\n* `mm`\n* `ss`\n* `XX`\n* `XXX`\n* `yy`\n* `yyyy`\n* `zzz`\n\nAdditionally `S` letter groups (fractional seconds) of length one to nine are supported providing they occur after `ss` and separated from the `ss` by a `.`, `,` or `:`.\nSpacing and punctuation is also permitted with the exception of `?`, newline and carriage return, together with literal text enclosed in single quotes.\nFor example, `MM/dd HH.mm.ss,SSSSSS 'in' yyyy` is a valid override format.\n\nOne valuable use case for this parameter is when the format is semi-structured text, there are multiple timestamp formats in the text, and you know which format corresponds to the primary timestamp, but you do not want to specify the full `grok_pattern`.\nAnother is when the timestamp format is one that the structure finder does not consider by default.\n\nIf this parameter is not specified, the structure finder chooses the best format from a built-in set.\n\nIf the special value `null` is specified the structure finder will not look for a primary timestamp in the text.\nWhen the format is semi-structured text this will result in the structure finder treating the text as single-line messages.", "x-found-in": "query" } }, "description": "Find the structure of a text file.\n\nThe text file must contain data that is suitable to be ingested into Elasticsearch.\n\nThis API provides a starting point for ingesting data into Elasticsearch in a format that is suitable for subsequent use with other Elastic Stack functionality.\nUnlike other Elasticsearch endpoints, the data that is posted to this endpoint does not need to be UTF-8 encoded and in JSON format.\nIt must, however, be text; binary text formats are not currently supported.\nThe size is limited to the Elasticsearch HTTP receive buffer size, which defaults to 100 Mb.\n\nThe response from the API contains:\n\n* A couple of messages from the beginning of the text.\n* Statistics that reveal the most common values for all fields detected within the text and basic numeric statistics for numeric fields.\n* Information about the structure of the text, which is useful when you write ingest configurations to index it or similarly formatted text.\n* Appropriate mappings for an Elasticsearch index, which you could use to ingest the text.\n\nAll this information can be calculated by the structure finder with no guidance.\nHowever, you can optionally override some of the decisions about the text structure by specifying one or more query parameters." }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "text_structure.find_structure", "type": "object", "properties": { "charset": { "type": "string", "description": "The text's character set.\nIt must be a character set that is supported by the JVM that Elasticsearch uses.\nFor example, `UTF-8`, `UTF-16LE`, `windows-1252`, or `EUC-JP`.\nIf this parameter is not specified, the structure finder chooses an appropriate character set.", "x-found-in": "query" }, "column_names": { "anyOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }], "description": "If you have set format to `delimited`, you can specify the column names in a comma-separated list.\nIf this parameter is not specified, the structure finder uses the column names from the header row of the text.\nIf the text does not have a header role, columns are named \"column1\", \"column2\", \"column3\", for example.", "x-found-in": "query" }, "delimiter": { "type": "string", "description": "If you have set `format` to `delimited`, you can specify the character used to delimit the values in each row.\nOnly a single character is supported; the delimiter cannot have multiple characters.\nBy default, the API considers the following possibilities: comma, tab, semi-colon, and pipe (`|`).\nIn this default scenario, all rows must have the same number of fields for the delimited format to be detected.\nIf you specify a delimiter, up to 10% of the rows can have a different number of columns than the first row.", "x-found-in": "query" }, "ecs_compatibility": { "type": "string", "description": "The mode of compatibility with ECS compliant Grok patterns.\nUse this parameter to specify whether to use ECS Grok patterns instead of legacy ones when the structure finder creates a Grok pattern.\nValid values are `disabled` and `v1`.\nThis setting primarily has an impact when a whole message Grok pattern such as `%{CATALINALOG}` matches the input.\nIf the structure finder identifies a common structure but has no idea of meaning then generic field names such as `path`, `ipaddress`, `field1`, and `field2` are used in the `grok_pattern` output, with the intention that a user who knows the meanings rename these fields before using it.", "x-found-in": "query" }, "explain": { "type": "boolean", "description": "If this parameter is set to `true`, the response includes a field named explanation, which is an array of strings that indicate how the structure finder produced its result.\nIf the structure finder produces unexpected results for some text, use this query parameter to help you determine why the returned structure was chosen.", "x-found-in": "query" }, "format": { "$ref": "./text_structure.find_structure.json#/$defs/text_structure.find_structure__FindStructureFormat", "description": "The high level structure of the text.\nValid values are `ndjson`, `xml`, `delimited`, and `semi_structured_text`.\nBy default, the API chooses the format.\nIn this default scenario, all rows must have the same number of fields for a delimited format to be detected.\nIf the format is set to `delimited` and the delimiter is not set, however, the API tolerates up to 5% of rows that have a different number of columns than the first row.", "x-found-in": "query" }, "grok_pattern": { "type": "string", "description": "If you have set `format` to `semi_structured_text`, you can specify a Grok pattern that is used to extract fields from every message in the text.\nThe name of the timestamp field in the Grok pattern must match what is specified in the `timestamp_field` parameter.\nIf that parameter is not specified, the name of the timestamp field in the Grok pattern must match \"timestamp\".\nIf `grok_pattern` is not specified, the structure finder creates a Grok pattern.", "x-found-in": "query" }, "has_header_row": { "type": "boolean", "description": "If you have set `format` to `delimited`, you can use this parameter to indicate whether the column names are in the first row of the text.\nIf this parameter is not specified, the structure finder guesses based on the similarity of the first row of the text to other rows.", "x-found-in": "query" }, "line_merge_size_limit": { "type": "number", "description": "The maximum number of characters in a message when lines are merged to form messages while analyzing semi-structured text.\nIf you have extremely long messages you may need to increase this, but be aware that this may lead to very long processing times if the way to group lines into messages is misdetected.", "x-found-in": "query" }, "lines_to_sample": { "type": "number", "description": "The number of lines to include in the structural analysis, starting from the beginning of the text.\nThe minimum is 2.\nIf the value of this parameter is greater than the number of lines in the text, the analysis proceeds (as long as there are at least two lines in the text) for all of the lines.\n\nNOTE: The number of lines and the variation of the lines affects the speed of the analysis.\nFor example, if you upload text where the first 1000 lines are all variations on the same message, the analysis will find more commonality than would be seen with a bigger sample.\nIf possible, however, it is more efficient to upload sample text with more variety in the first 1000 lines than to request analysis of 100000 lines to achieve some variety.", "x-found-in": "query" }, "quote": { "type": "string", "description": "If you have set `format` to `delimited`, you can specify the character used to quote the values in each row if they contain newlines or the delimiter character.\nOnly a single character is supported.\nIf this parameter is not specified, the default value is a double quote (`\"`).\nIf your delimited text format does not use quoting, a workaround is to set this argument to a character that does not appear anywhere in the sample.", "x-found-in": "query" }, "should_trim_fields": { "type": "boolean", "description": "If you have set `format` to `delimited`, you can specify whether values between delimiters should have whitespace trimmed from them.\nIf this parameter is not specified and the delimiter is pipe (`|`), the default value is `true`.\nOtherwise, the default value is `false`.", "x-found-in": "query" }, "should_parse_recursively": { "type": "boolean", "description": "If the format is `ndjson`, you can specify whether to parse nested JSON objects recursively.\nThe nested objects are parsed to a maximum depth equal to the default value of the `index.mapping.depth.limit` setting.\nAnything beyond that depth is parsed as an `object` type field.\nFor formats other than `ndjson`, this parameter is ignored.", "x-found-in": "query" }, "timeout": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "The maximum amount of time that the structure analysis can take.\nIf the analysis is still running when the timeout expires then it will be stopped.", "x-found-in": "query" }, "timestamp_field": { "type": "string", "description": "The name of the field that contains the primary timestamp of each record in the text.\nIn particular, if the text were ingested into an index, this is the field that would be used to populate the `@timestamp` field.\n\nIf the `format` is `semi_structured_text`, this field must match the name of the appropriate extraction in the `grok_pattern`.\nTherefore, for semi-structured text, it is best not to specify this parameter unless `grok_pattern` is also specified.\n\nFor structured text, if you specify this parameter, the field must exist within the text.\n\nIf this parameter is not specified, the structure finder makes a decision about which field (if any) is the primary timestamp field.\nFor structured text, it is not compulsory to have a timestamp in the text.", "x-found-in": "query" }, "timestamp_format": { "type": "string", "description": "The Java time format of the timestamp field in the text.\n\nOnly a subset of Java time format letter groups are supported:\n\n* `a`\n* `d`\n* `dd`\n* `EEE`\n* `EEEE`\n* `H`\n* `HH`\n* `h`\n* `M`\n* `MM`\n* `MMM`\n* `MMMM`\n* `mm`\n* `ss`\n* `XX`\n* `XXX`\n* `yy`\n* `yyyy`\n* `zzz`\n\nAdditionally `S` letter groups (fractional seconds) of length one to nine are supported providing they occur after `ss` and separated from the `ss` by a `.`, `,` or `:`.\nSpacing and punctuation is also permitted with the exception of `?`, newline and carriage return, together with literal text enclosed in single quotes.\nFor example, `MM/dd HH.mm.ss,SSSSSS 'in' yyyy` is a valid override format.\n\nOne valuable use case for this parameter is when the format is semi-structured text, there are multiple timestamp formats in the text, and you know which format corresponds to the primary timestamp, but you do not want to specify the full `grok_pattern`.\nAnother is when the timestamp format is one that the structure finder does not consider by default.\n\nIf this parameter is not specified, the structure finder chooses the best format from a built-in set.\n\nIf the special value `null` is specified the structure finder will not look for a primary timestamp in the text.\nWhen the format is semi-structured text this will result in the structure finder treating the text as single-line messages.", "x-found-in": "query" }, "text_files": { "type": "array", "items": {}, "x-found-in": "body" } }, "description": "Find the structure of a text file.\n\nThe text file must contain data that is suitable to be ingested into Elasticsearch.\n\nThis API provides a starting point for ingesting data into Elasticsearch in a format that is suitable for subsequent use with other Elastic Stack functionality.\nUnlike other Elasticsearch endpoints, the data that is posted to this endpoint does not need to be UTF-8 encoded and in JSON format.\nIt must, however, be text; binary text formats are not currently supported.\nThe size is limited to the Elasticsearch HTTP receive buffer size, which defaults to 100 Mb.\n\nThe response from the API contains:\n\n* A couple of messages from the beginning of the text.\n* Statistics that reveal the most common values for all fields detected within the text and basic numeric statistics for numeric fields.\n* Information about the structure of the text, which is useful when you write ingest configurations to index it or similarly formatted text.\n* Appropriate mappings for an Elasticsearch index, which you could use to ingest the text.\n\nAll this information can be calculated by the structure finder with no guidance.\nHowever, you can optionally override some of the decisions about the text structure by specifying one or more query parameters." }

package/lib/cjs/es/json/text_structure.test_grok_pattern.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "text_structure.test_grok_pattern", "type": "object", "properties": { "grok_pattern": { "type": "string", "description": "The Grok pattern to run on the text.", "x-found-in": "body" }, "text": { "type": "array", "items": { "type": "string" }, "description": "The lines of text to run the Grok pattern on.", "x-found-in": "body" }, "ecs_compatibility": { "type": "string", "description": "The mode of compatibility with ECS compliant Grok patterns.\nUse this parameter to specify whether to use ECS Grok patterns instead of legacy ones when the structure finder creates a Grok pattern.\nValid values are `disabled` and `v1`.", "x-found-in": "query" } }, "required": ["grok_pattern", "text"], "description": "Test a Grok pattern.\n\nTest a Grok pattern on one or more lines of text.\nThe API indicates whether the lines match the pattern together with the offsets and lengths of the matched substrings." }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "text_structure.test_grok_pattern", "type": "object", "properties": { "ecs_compatibility": { "type": "string", "description": "The mode of compatibility with ECS compliant Grok patterns.\nUse this parameter to specify whether to use ECS Grok patterns instead of legacy ones when the structure finder creates a Grok pattern.\nValid values are `disabled` and `v1`.", "x-found-in": "query" }, "grok_pattern": { "type": "string", "description": "The Grok pattern to run on the text.", "x-found-in": "body" }, "text": { "type": "array", "items": { "type": "string" }, "description": "The lines of text to run the Grok pattern on.", "x-found-in": "body" } }, "required": ["grok_pattern", "text"], "description": "Test a Grok pattern.\n\nTest a Grok pattern on one or more lines of text.\nThe API indicates whether the lines match the pattern together with the offsets and lengths of the matched substrings." }

package/lib/cjs/es/json/transform.preview_transform.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "transform.preview_transform", "type": "object", "properties": { "dest": { "$ref": "./transform._types.json#/$defs/transform._types__Destination", "description": "The destination for the transform.", "x-found-in": "body" }, "description": { "type": "string", "description": "Free text description of the transform.", "x-found-in": "body" }, "frequency": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "The interval between checks for changes in the source indices when the\ntransform is running continuously. Also determines the retry interval in\nthe event of transient failures while the transform is searching or\nindexing. The minimum value is 1s and the maximum is 1h.", "x-found-in": "body" }, "pivot": { "$ref": "./transform._types.json#/$defs/transform._types__Pivot", "description": "The pivot method transforms the data by aggregating and grouping it.\nThese objects define the group by fields and the aggregation to reduce\nthe data.", "x-found-in": "body" }, "source": { "$ref": "./transform._types.json#/$defs/transform._types__Source", "description": "The source of the data for the transform.", "x-found-in": "body" }, "settings": { "$ref": "./transform._types.json#/$defs/transform._types__Settings", "description": "Defines optional transform settings.", "x-found-in": "body" }, "sync": { "$ref": "./transform._types.json#/$defs/transform._types__SyncContainer", "description": "Defines the properties transforms require to run continuously.", "x-found-in": "body" }, "retention_policy": { "$ref": "./transform._types.json#/$defs/transform._types__RetentionPolicyContainer", "description": "Defines a retention policy for the transform. Data that meets the defined\ncriteria is deleted from the destination index.", "x-found-in": "body" }, "latest": { "$ref": "./transform._types.json#/$defs/transform._types__Latest", "description": "The latest method transforms the data by finding the latest document for\neach unique key.", "x-found-in": "body" }, "timeout": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "Period to wait for a response. If no response is received before the\ntimeout expires, the request fails and returns an error.", "x-found-in": "query" }, "transform_id": { "type": "string", "description": "Identifier for the transform to preview. If you specify this path parameter, you cannot provide transform\nconfiguration details in the request body.", "x-found-in": "path" } }, "description": "Preview a transform.\n\nGenerates a preview of the results that you will get when you create a transform with the same configuration.\n\nIt returns a maximum of 100 results. The calculations are based on all the current data in the source index. It also\ngenerates a list of mappings and settings for the destination index. These values are determined based on the field\ntypes of the source index and the transform aggregations." }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "transform.preview_transform", "type": "object", "properties": { "timeout": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "Period to wait for a response. If no response is received before the\ntimeout expires, the request fails and returns an error.", "x-found-in": "query" }, "dest": { "$ref": "./transform._types.json#/$defs/transform._types__Destination", "description": "The destination for the transform.", "x-found-in": "body" }, "description": { "type": "string", "description": "Free text description of the transform.", "x-found-in": "body" }, "frequency": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "The interval between checks for changes in the source indices when the\ntransform is running continuously. Also determines the retry interval in\nthe event of transient failures while the transform is searching or\nindexing. The minimum value is 1s and the maximum is 1h.", "x-found-in": "body" }, "pivot": { "$ref": "./transform._types.json#/$defs/transform._types__Pivot", "description": "The pivot method transforms the data by aggregating and grouping it.\nThese objects define the group by fields and the aggregation to reduce\nthe data.", "x-found-in": "body" }, "source": { "$ref": "./transform._types.json#/$defs/transform._types__Source", "description": "The source of the data for the transform.", "x-found-in": "body" }, "settings": { "$ref": "./transform._types.json#/$defs/transform._types__Settings", "description": "Defines optional transform settings.", "x-found-in": "body" }, "sync": { "$ref": "./transform._types.json#/$defs/transform._types__SyncContainer", "description": "Defines the properties transforms require to run continuously.", "x-found-in": "body" }, "retention_policy": { "$ref": "./transform._types.json#/$defs/transform._types__RetentionPolicyContainer", "description": "Defines a retention policy for the transform. Data that meets the defined\ncriteria is deleted from the destination index.", "x-found-in": "body" }, "latest": { "$ref": "./transform._types.json#/$defs/transform._types__Latest", "description": "The latest method transforms the data by finding the latest document for\neach unique key.", "x-found-in": "body" }, "transform_id": { "type": "string", "description": "Identifier for the transform to preview. If you specify this path parameter, you cannot provide transform\nconfiguration details in the request body.", "x-found-in": "path" } }, "description": "Preview a transform.\n\nGenerates a preview of the results that you will get when you create a transform with the same configuration.\n\nIt returns a maximum of 100 results. The calculations are based on all the current data in the source index. It also\ngenerates a list of mappings and settings for the destination index. These values are determined based on the field\ntypes of the source index and the transform aggregations." }

package/lib/cjs/es/json/transform.put_transform.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "transform.put_transform", "type": "object", "properties": { "dest": { "$ref": "./transform._types.json#/$defs/transform._types__Destination", "description": "The destination for the transform.", "x-found-in": "body" }, "description": { "type": "string", "description": "Free text description of the transform.", "x-found-in": "body" }, "frequency": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "The interval between checks for changes in the source indices when the transform is running continuously. Also\ndetermines the retry interval in the event of transient failures while the transform is searching or indexing.\nThe minimum value is `1s` and the maximum is `1h`.", "x-found-in": "body" }, "latest": { "$ref": "./transform._types.json#/$defs/transform._types__Latest", "description": "The latest method transforms the data by finding the latest document for each unique key.", "x-found-in": "body" }, "_meta": { "$ref": "./_types.json#/$defs/_types__Metadata", "description": "Defines optional transform metadata.", "x-found-in": "body" }, "pivot": { "$ref": "./transform._types.json#/$defs/transform._types__Pivot", "description": "The pivot method transforms the data by aggregating and grouping it. These objects define the group by fields\nand the aggregation to reduce the data.", "x-found-in": "body" }, "retention_policy": { "$ref": "./transform._types.json#/$defs/transform._types__RetentionPolicyContainer", "description": "Defines a retention policy for the transform. Data that meets the defined criteria is deleted from the\ndestination index.", "x-found-in": "body" }, "settings": { "$ref": "./transform._types.json#/$defs/transform._types__Settings", "description": "Defines optional transform settings.", "x-found-in": "body" }, "source": { "$ref": "./transform._types.json#/$defs/transform._types__Source", "description": "The source of the data for the transform.", "x-found-in": "body" }, "sync": { "$ref": "./transform._types.json#/$defs/transform._types__SyncContainer", "description": "Defines the properties transforms require to run continuously.", "x-found-in": "body" }, "defer_validation": { "type": "boolean", "description": "When the transform is created, a series of validations occur to ensure its success. For example, there is a\ncheck for the existence of the source indices and a check that the destination index is not part of the source\nindex pattern. You can use this parameter to skip the checks, for example when the source index does not exist\nuntil after the transform is created. The validations are always run when you start the transform, however, with\nthe exception of privilege checks.", "x-found-in": "query" }, "timeout": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "Period to wait for a response. If no response is received before the timeout expires, the request fails and returns an error.", "x-found-in": "query" }, "transform_id": { "type": "string", "description": "Identifier for the transform. This identifier can contain lowercase alphanumeric characters (a-z and 0-9),\nhyphens, and underscores. It has a 64 character limit and must start and end with alphanumeric characters.", "x-found-in": "path" } }, "required": ["transform_id", "dest", "source"], "description": "Create a transform.\n\nCreates a transform.\n\nA transform copies data from source indices, transforms it, and persists it into an entity-centric destination index. You can also think of the destination index as a two-dimensional tabular data structure (known as\na data frame). The ID for each document in the data frame is generated from a hash of the entity, so there is a\nunique row per entity.\n\nYou must choose either the latest or pivot method for your transform; you cannot use both in a single transform. If\nyou choose to use the pivot method for your transform, the entities are defined by the set of `group_by` fields in\nthe pivot object. If you choose to use the latest method, the entities are defined by the `unique_key` field values\nin the latest object.\n\nYou must have `create_index`, `index`, and `read` privileges on the destination index and `read` and\n`view_index_metadata` privileges on the source indices. When Elasticsearch security features are enabled, the\ntransform remembers which roles the user that created it had at the time of creation and uses those same roles. If\nthose roles do not have the required privileges on the source and destination indices, the transform fails when it\nattempts unauthorized operations.\n\nNOTE: You must use Kibana or this API to create a transform. Do not add a transform directly into any\n`.transform-internal*` indices using the Elasticsearch index API. If Elasticsearch security features are enabled, do\nnot give users any privileges on `.transform-internal*` indices. If you used transforms prior to 7.5, also do not\ngive users any privileges on `.data-frame-internal*` indices." }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "transform.put_transform", "type": "object", "properties": { "defer_validation": { "type": "boolean", "description": "When the transform is created, a series of validations occur to ensure its success. For example, there is a\ncheck for the existence of the source indices and a check that the destination index is not part of the source\nindex pattern. You can use this parameter to skip the checks, for example when the source index does not exist\nuntil after the transform is created. The validations are always run when you start the transform, however, with\nthe exception of privilege checks.", "x-found-in": "query" }, "timeout": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "Period to wait for a response. If no response is received before the timeout expires, the request fails and returns an error.", "x-found-in": "query" }, "dest": { "$ref": "./transform._types.json#/$defs/transform._types__Destination", "description": "The destination for the transform.", "x-found-in": "body" }, "description": { "type": "string", "description": "Free text description of the transform.", "x-found-in": "body" }, "frequency": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "The interval between checks for changes in the source indices when the transform is running continuously. Also\ndetermines the retry interval in the event of transient failures while the transform is searching or indexing.\nThe minimum value is `1s` and the maximum is `1h`.", "x-found-in": "body" }, "latest": { "$ref": "./transform._types.json#/$defs/transform._types__Latest", "description": "The latest method transforms the data by finding the latest document for each unique key.", "x-found-in": "body" }, "_meta": { "$ref": "./_types.json#/$defs/_types__Metadata", "description": "Defines optional transform metadata.", "x-found-in": "body" }, "pivot": { "$ref": "./transform._types.json#/$defs/transform._types__Pivot", "description": "The pivot method transforms the data by aggregating and grouping it. These objects define the group by fields\nand the aggregation to reduce the data.", "x-found-in": "body" }, "retention_policy": { "$ref": "./transform._types.json#/$defs/transform._types__RetentionPolicyContainer", "description": "Defines a retention policy for the transform. Data that meets the defined criteria is deleted from the\ndestination index.", "x-found-in": "body" }, "settings": { "$ref": "./transform._types.json#/$defs/transform._types__Settings", "description": "Defines optional transform settings.", "x-found-in": "body" }, "source": { "$ref": "./transform._types.json#/$defs/transform._types__Source", "description": "The source of the data for the transform.", "x-found-in": "body" }, "sync": { "$ref": "./transform._types.json#/$defs/transform._types__SyncContainer", "description": "Defines the properties transforms require to run continuously.", "x-found-in": "body" }, "transform_id": { "type": "string", "description": "Identifier for the transform. This identifier can contain lowercase alphanumeric characters (a-z and 0-9),\nhyphens, and underscores. It has a 64 character limit and must start and end with alphanumeric characters.", "x-found-in": "path" } }, "required": ["transform_id", "dest", "source"], "description": "Create a transform.\n\nCreates a transform.\n\nA transform copies data from source indices, transforms it, and persists it into an entity-centric destination index. You can also think of the destination index as a two-dimensional tabular data structure (known as\na data frame). The ID for each document in the data frame is generated from a hash of the entity, so there is a\nunique row per entity.\n\nYou must choose either the latest or pivot method for your transform; you cannot use both in a single transform. If\nyou choose to use the pivot method for your transform, the entities are defined by the set of `group_by` fields in\nthe pivot object. If you choose to use the latest method, the entities are defined by the `unique_key` field values\nin the latest object.\n\nYou must have `create_index`, `index`, and `read` privileges on the destination index and `read` and\n`view_index_metadata` privileges on the source indices. When Elasticsearch security features are enabled, the\ntransform remembers which roles the user that created it had at the time of creation and uses those same roles. If\nthose roles do not have the required privileges on the source and destination indices, the transform fails when it\nattempts unauthorized operations.\n\nNOTE: You must use Kibana or this API to create a transform. Do not add a transform directly into any\n`.transform-internal*` indices using the Elasticsearch index API. If Elasticsearch security features are enabled, do\nnot give users any privileges on `.transform-internal*` indices. If you used transforms prior to 7.5, also do not\ngive users any privileges on `.data-frame-internal*` indices." }

package/lib/cjs/es/json/transform.update_transform.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "transform.update_transform", "type": "object", "properties": { "dest": { "$ref": "./transform._types.json#/$defs/transform._types__Destination", "description": "The destination for the transform.", "x-found-in": "body" }, "description": { "type": "string", "description": "Free text description of the transform.", "x-found-in": "body" }, "frequency": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "The interval between checks for changes in the source indices when the\ntransform is running continuously. Also determines the retry interval in\nthe event of transient failures while the transform is searching or\nindexing. The minimum value is 1s and the maximum is 1h.", "x-found-in": "body" }, "_meta": { "$ref": "./_types.json#/$defs/_types__Metadata", "description": "Defines optional transform metadata.", "x-found-in": "body" }, "source": { "$ref": "./transform._types.json#/$defs/transform._types__Source", "description": "The source of the data for the transform.", "x-found-in": "body" }, "settings": { "$ref": "./transform._types.json#/$defs/transform._types__Settings", "description": "Defines optional transform settings.", "x-found-in": "body" }, "sync": { "$ref": "./transform._types.json#/$defs/transform._types__SyncContainer", "description": "Defines the properties transforms require to run continuously.", "x-found-in": "body" }, "retention_policy": { "oneOf": [{ "$ref": "./transform._types.json#/$defs/transform._types__RetentionPolicyContainer" }, { "type": "null" }], "description": "Defines a retention policy for the transform. Data that meets the defined\ncriteria is deleted from the destination index.", "x-found-in": "body" }, "defer_validation": { "type": "boolean", "description": "When true, deferrable validations are not run. This behavior may be\ndesired if the source index does not exist until after the transform is\ncreated.", "x-found-in": "query" }, "timeout": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "Period to wait for a response. If no response is received before the\ntimeout expires, the request fails and returns an error.", "x-found-in": "query" }, "transform_id": { "type": "string", "description": "Identifier for the transform.", "x-found-in": "path" } }, "required": ["transform_id"], "description": "Update a transform.\n\nUpdates certain properties of a transform.\n\nAll updated properties except `description` do not take effect until after the transform starts the next checkpoint,\nthus there is data consistency in each checkpoint. To use this API, you must have `read` and `view_index_metadata`\nprivileges for the source indices. You must also have `index` and `read` privileges for the destination index. When\nElasticsearch security features are enabled, the transform remembers which roles the user who updated it had at the\ntime of update and runs with those privileges." }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "transform.update_transform", "type": "object", "properties": { "defer_validation": { "type": "boolean", "description": "When true, deferrable validations are not run. This behavior may be\ndesired if the source index does not exist until after the transform is\ncreated.", "x-found-in": "query" }, "timeout": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "Period to wait for a response. If no response is received before the\ntimeout expires, the request fails and returns an error.", "x-found-in": "query" }, "dest": { "$ref": "./transform._types.json#/$defs/transform._types__Destination", "description": "The destination for the transform.", "x-found-in": "body" }, "description": { "type": "string", "description": "Free text description of the transform.", "x-found-in": "body" }, "frequency": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "The interval between checks for changes in the source indices when the\ntransform is running continuously. Also determines the retry interval in\nthe event of transient failures while the transform is searching or\nindexing. The minimum value is 1s and the maximum is 1h.", "x-found-in": "body" }, "_meta": { "$ref": "./_types.json#/$defs/_types__Metadata", "description": "Defines optional transform metadata.", "x-found-in": "body" }, "source": { "$ref": "./transform._types.json#/$defs/transform._types__Source", "description": "The source of the data for the transform.", "x-found-in": "body" }, "settings": { "$ref": "./transform._types.json#/$defs/transform._types__Settings", "description": "Defines optional transform settings.", "x-found-in": "body" }, "sync": { "$ref": "./transform._types.json#/$defs/transform._types__SyncContainer", "description": "Defines the properties transforms require to run continuously.", "x-found-in": "body" }, "retention_policy": { "anyOf": [{ "$ref": "./transform._types.json#/$defs/transform._types__RetentionPolicyContainer" }, { "type": "null" }], "description": "Defines a retention policy for the transform. Data that meets the defined\ncriteria is deleted from the destination index.", "x-found-in": "body" }, "transform_id": { "type": "string", "description": "Identifier for the transform.", "x-found-in": "path" } }, "required": ["transform_id"], "description": "Update a transform.\n\nUpdates certain properties of a transform.\n\nAll updated properties except `description` do not take effect until after the transform starts the next checkpoint,\nthus there is data consistency in each checkpoint. To use this API, you must have `read` and `view_index_metadata`\nprivileges for the source indices. You must also have `index` and `read` privileges for the destination index. When\nElasticsearch security features are enabled, the transform remembers which roles the user who updated it had at the\ntime of update and runs with those privileges." }

package/lib/cjs/es/json/update.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "update", "type": "object", "properties": { "detect_noop": { "type": "boolean", "description": "If `true`, the `result` in the response is set to `noop` (no operation) when there are no changes to the document.", "x-found-in": "body" }, "doc": { "description": "A partial update to an existing document.\nIf both `doc` and `script` are specified, `doc` is ignored.", "x-found-in": "body" }, "doc_as_upsert": { "type": "boolean", "description": "If `true`, use the contents of 'doc' as the value of 'upsert'.\nNOTE: Using ingest pipelines with `doc_as_upsert` is not supported.", "x-found-in": "body" }, "script": { "$ref": "./_types.json#/$defs/_types__Script", "description": "The script to run to update the document.", "x-found-in": "body" }, "scripted_upsert": { "type": "boolean", "description": "If `true`, run the script whether or not the document exists.", "x-found-in": "body" }, "_source": { "$ref": "./_global.search._types.json#/$defs/_global.search._types__SourceConfigParam", "description": "If `false`, source retrieval is turned off.\nYou can also specify a comma-separated list of the fields you want to retrieve.", "x-found-in": "query" }, "upsert": { "description": "If the document does not already exist, the contents of 'upsert' are inserted as a new document.\nIf the document exists, the 'script' is run.", "x-found-in": "body" }, "if_primary_term": { "type": "number", "description": "Only perform the operation if the document has this primary term.", "x-found-in": "query" }, "if_seq_no": { "type": "number", "description": "Only perform the operation if the document has this sequence number.", "x-found-in": "query" }, "include_source_on_error": { "type": "boolean", "description": "True or false if to include the document source in the error message in case of parsing errors.", "x-found-in": "query" }, "lang": { "type": "string", "description": "The script language.", "x-found-in": "query" }, "refresh": { "$ref": "./_types.json#/$defs/_types__Refresh", "description": "If 'true', Elasticsearch refreshes the affected shards to make this operation visible to search.\nIf 'wait_for', it waits for a refresh to make this operation visible to search.\nIf 'false', it does nothing with refreshes.", "x-found-in": "query" }, "require_alias": { "type": "boolean", "description": "If `true`, the destination must be an index alias.", "x-found-in": "query" }, "retry_on_conflict": { "type": "number", "description": "The number of times the operation should be retried when a conflict occurs.", "x-found-in": "query" }, "routing": { "$ref": "./_types.json#/$defs/_types__Routing", "description": "A custom value used to route operations to a specific shard.\nNot allowed when `index.slice.enabled` is `true` for the target index; use `_slice` instead.", "x-found-in": "query" }, "timeout": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "The period to wait for the following operations: dynamic mapping updates and waiting for active shards.\nElasticsearch waits for at least the timeout period before failing.\nThe actual wait time could be longer, particularly when multiple waits occur.", "x-found-in": "query" }, "wait_for_active_shards": { "$ref": "./_types.json#/$defs/_types__WaitForActiveShards", "description": "The number of copies of each shard that must be active before proceeding with the operation.\nSet to 'all' or any positive integer up to the total number of shards in the index (`number_of_replicas`+1).\nThe default value of `1` means it waits for each primary shard to be active.", "x-found-in": "query" }, "_source_excludes": { "$ref": "./_types.json#/$defs/_types__Fields", "description": "The source fields you want to exclude.", "x-found-in": "query" }, "_source_includes": { "$ref": "./_types.json#/$defs/_types__Fields", "description": "The source fields you want to retrieve.", "x-found-in": "query" }, "id": { "type": "string", "description": "A unique identifier for the document to be updated.", "x-found-in": "path" }, "index": { "type": "string", "description": "The name of the target index.\nBy default, the index is created automatically if it doesn't exist.", "x-found-in": "path" } }, "required": ["id", "index"], "description": "Update a document.\n\nUpdate a document by running a script or passing a partial document.\n\nIf the Elasticsearch security features are enabled, you must have the `index` or `write` index privilege for the target index or index alias.\n\nThe script can update, delete, or skip modifying the document.\nThe API also supports passing a partial document, which is merged into the existing document.\nTo fully replace an existing document, use the index API.\nThis operation:\n\n* Gets the document (collocated with the shard) from the index.\n* Runs the specified script.\n* Indexes the result.\n\nThe document must still be reindexed, but using this API removes some network roundtrips and reduces chances of version conflicts between the GET and the index operation.\n\nThe `_source` field must be enabled to use this API.\nIn addition to `_source`, you can access the following variables through the `ctx` map: `_index`, `_type`, `_id`, `_version`, `_routing`, and `_now` (the current timestamp).\nFor usage examples such as partial updates, upserts, and scripted updates, see the External documentation." }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "update", "type": "object", "properties": { "if_primary_term": { "type": "number", "description": "Only perform the operation if the document has this primary term.", "x-found-in": "query" }, "if_seq_no": { "type": "number", "description": "Only perform the operation if the document has this sequence number.", "x-found-in": "query" }, "include_source_on_error": { "type": "boolean", "description": "True or false if to include the document source in the error message in case of parsing errors.", "x-found-in": "query" }, "lang": { "type": "string", "description": "The script language.", "x-found-in": "query" }, "refresh": { "$ref": "./_types.json#/$defs/_types__Refresh", "description": "If 'true', Elasticsearch refreshes the affected shards to make this operation visible to search.\nIf 'wait_for', it waits for a refresh to make this operation visible to search.\nIf 'false', it does nothing with refreshes.", "x-found-in": "query" }, "require_alias": { "type": "boolean", "description": "If `true`, the destination must be an index alias.", "x-found-in": "query" }, "retry_on_conflict": { "type": "number", "description": "The number of times the operation should be retried when a conflict occurs.", "x-found-in": "query" }, "routing": { "$ref": "./_types.json#/$defs/_types__Routing", "description": "A custom value used to route operations to a specific shard.\nNot allowed when `index.slice.enabled` is `true` for the target index; use `_slice` instead.", "x-found-in": "query" }, "timeout": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "The period to wait for the following operations: dynamic mapping updates and waiting for active shards.\nElasticsearch waits for at least the timeout period before failing.\nThe actual wait time could be longer, particularly when multiple waits occur.", "x-found-in": "query" }, "wait_for_active_shards": { "$ref": "./_types.json#/$defs/_types__WaitForActiveShards", "description": "The number of copies of each shard that must be active before proceeding with the operation.\nSet to 'all' or any positive integer up to the total number of shards in the index (`number_of_replicas`+1).\nThe default value of `1` means it waits for each primary shard to be active.", "x-found-in": "query" }, "_source": { "$ref": "./_global.search._types.json#/$defs/_global.search._types__SourceConfig", "description": "If `false`, turn off source retrieval.\nYou can also specify a comma-separated list of the fields you want to retrieve.", "x-found-in": "body" }, "_source_excludes": { "$ref": "./_types.json#/$defs/_types__Fields", "description": "The source fields you want to exclude.", "x-found-in": "query" }, "_source_includes": { "$ref": "./_types.json#/$defs/_types__Fields", "description": "The source fields you want to retrieve.", "x-found-in": "query" }, "detect_noop": { "type": "boolean", "description": "If `true`, the `result` in the response is set to `noop` (no operation) when there are no changes to the document.", "x-found-in": "body" }, "doc": { "description": "A partial update to an existing document.\nIf both `doc` and `script` are specified, `doc` is ignored.", "x-found-in": "body" }, "doc_as_upsert": { "type": "boolean", "description": "If `true`, use the contents of 'doc' as the value of 'upsert'.\nNOTE: Using ingest pipelines with `doc_as_upsert` is not supported.", "x-found-in": "body" }, "script": { "$ref": "./_types.json#/$defs/_types__Script", "description": "The script to run to update the document.", "x-found-in": "body" }, "scripted_upsert": { "type": "boolean", "description": "If `true`, run the script whether or not the document exists.", "x-found-in": "body" }, "upsert": { "description": "If the document does not already exist, the contents of 'upsert' are inserted as a new document.\nIf the document exists, the 'script' is run.", "x-found-in": "body" }, "id": { "type": "string", "description": "A unique identifier for the document to be updated.", "x-found-in": "path" }, "index": { "type": "string", "description": "The name of the target index.\nBy default, the index is created automatically if it doesn't exist.", "x-found-in": "path" } }, "required": ["id", "index"], "description": "Update a document.\n\nUpdate a document by running a script or passing a partial document.\n\nIf the Elasticsearch security features are enabled, you must have the `index` or `write` index privilege for the target index or index alias.\n\nThe script can update, delete, or skip modifying the document.\nThe API also supports passing a partial document, which is merged into the existing document.\nTo fully replace an existing document, use the index API.\nThis operation:\n\n* Gets the document (collocated with the shard) from the index.\n* Runs the specified script.\n* Indexes the result.\n\nThe document must still be reindexed, but using this API removes some network roundtrips and reduces chances of version conflicts between the GET and the index operation.\n\nThe `_source` field must be enabled to use this API.\nIn addition to `_source`, you can access the following variables through the `ctx` map: `_index`, `_type`, `_id`, `_version`, `_routing`, and `_now` (the current timestamp).\nFor usage examples such as partial updates, upserts, and scripted updates, see the External documentation." }

package/lib/cjs/es/json/update_by_query.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "update_by_query", "type": "object", "properties": { "max_docs": { "type": "number", "description": "The maximum number of documents to process.\nIt defaults to all documents.\nWhen set to a value less than or equal to `scroll_size` and `conflicts` is set to `abort`, a scroll will not be used to retrieve the results for the operation.", "x-found-in": "query" }, "query": { "$ref": "./_types.query_dsl.json#/$defs/_types.query_dsl__QueryContainer", "description": "The documents to update using the Query DSL.", "x-found-in": "body" }, "script": { "$ref": "./_types.json#/$defs/_types__Script", "description": "The script to run to update the document source or metadata when updating.", "x-found-in": "body" }, "slice": { "$ref": "./_types.json#/$defs/_types__SlicedScroll", "description": "Slice the request manually using the provided slice ID and total number of slices.", "x-found-in": "body" }, "conflicts": { "$ref": "./_types.json#/$defs/_types__Conflicts", "description": "The preferred behavior when update by query hits version conflicts: `abort` or `proceed`.", "x-found-in": "query" }, "allow_no_indices": { "type": "boolean", "description": "A setting that does two separate checks on the index expression.\nIf `false`, the request returns an error (1) if any wildcard expression\n(including `_all` and `*`) resolves to zero matching indices or (2) if the\ncomplete set of resolved indices, aliases or data streams is empty after all\nexpressions are evaluated. If `true`, index expressions that resolve to no\nindices are allowed and the request returns an empty result.", "x-found-in": "query" }, "analyzer": { "type": "string", "description": "The analyzer to use for the query string.\nThis parameter can be used only when the `q` query string parameter is specified.", "x-found-in": "query" }, "analyze_wildcard": { "type": "boolean", "description": "If `true`, wildcard and prefix queries are analyzed.\nThis parameter can be used only when the `q` query string parameter is specified.", "x-found-in": "query" }, "default_operator": { "$ref": "./_types.query_dsl.json#/$defs/_types.query_dsl__Operator", "description": "The default operator for query string query: `and` or `or`.\nThis parameter can be used only when the `q` query string parameter is specified.", "x-found-in": "query" }, "df": { "type": "string", "description": "The field to use as default where no field prefix is given in the query string.\nThis parameter can be used only when the `q` query string parameter is specified.", "x-found-in": "query" }, "expand_wildcards": { "$ref": "./_types.json#/$defs/_types__ExpandWildcards", "description": "The type of index that wildcard patterns can match.\nIf the request can target data streams, this argument determines whether wildcard expressions match hidden data streams.\nIt supports comma-separated values, such as `open,hidden`.", "x-found-in": "query" }, "from": { "type": "number", "description": "Skips the specified number of documents.", "x-found-in": "query" }, "ignore_unavailable": { "type": "boolean", "description": "If `false`, the request returns an error if it targets a concrete (non-wildcarded)\nindex, alias, or data stream that is missing, closed, or otherwise unavailable.\nIf `true`, unavailable concrete targets are silently ignored.", "x-found-in": "query" }, "lenient": { "type": "boolean", "description": "If `true`, format-based query failures (such as providing text to a numeric field) in the query string will be ignored.\nThis parameter can be used only when the `q` query string parameter is specified.", "x-found-in": "query" }, "pipeline": { "type": "string", "description": "The ID of the pipeline to use to preprocess incoming documents.\nIf the index has a default ingest pipeline specified, then setting the value to `_none` disables the default ingest pipeline for this request.\nIf a final pipeline is configured it will always run, regardless of the value of this parameter.", "x-found-in": "query" }, "preference": { "type": "string", "description": "The node or shard the operation should be performed on.\nIt is random by default.", "x-found-in": "query" }, "q": { "type": "string", "description": "A query in the Lucene query string syntax.", "x-found-in": "query" }, "refresh": { "type": "boolean", "description": "If `true`, Elasticsearch refreshes affected shards to make the operation visible to search after the request completes.\nThis is different than the update API's `refresh` parameter, which causes just the shard that received the request to be refreshed.", "x-found-in": "query" }, "request_cache": { "type": "boolean", "description": "If `true`, the request cache is used for this request.\nIt defaults to the index-level setting.", "x-found-in": "query" }, "requests_per_second": { "type": "number", "description": "The maximum number of documents to update per second, across the entire update_by_query operation (including slices).\nIt can be either `-1` to turn off throttling or any decimal number like `1.7` or `12` to throttle to that level.", "x-found-in": "query" }, "routing": { "$ref": "./_types.json#/$defs/_types__Routing", "description": "A custom value used to route operations to a specific shard.\nNot allowed when `index.slice.enabled` is `true` for the target index; use `_slice` instead.", "x-found-in": "query" }, "scroll": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "The period to retain the search context for scrolling.", "x-found-in": "query" }, "scroll_size": { "type": "number", "description": "The size of the scroll request that powers the operation.", "x-found-in": "query" }, "search_timeout": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "An explicit timeout for each search request.\nBy default, there is no timeout.", "x-found-in": "query" }, "search_type": { "$ref": "./_types.json#/$defs/_types__SearchType", "description": "The type of the search operation. Available options include `query_then_fetch` and `dfs_query_then_fetch`.", "x-found-in": "query" }, "slices": { "$ref": "./_types.json#/$defs/_types__Slices", "description": "The number of slices this task should be divided into.", "x-found-in": "query" }, "sort": { "type": "array", "items": { "type": "string" }, "description": "A comma-separated list of <field>:<direction> pairs.", "x-found-in": "query" }, "stats": { "type": "array", "items": { "type": "string" }, "description": "The specific `tag` of the request for logging and statistical purposes.", "x-found-in": "query" }, "terminate_after": { "type": "number", "description": "The maximum number of documents to collect for each shard.\nIf a query reaches this limit, Elasticsearch terminates the query early.\nElasticsearch collects documents before sorting.\n\nIMPORTANT: Use with caution.\nElasticsearch applies this parameter to each shard handling the request.\nWhen possible, let Elasticsearch perform early termination automatically.\nAvoid specifying this parameter for requests that target data streams with backing indices across multiple data tiers.", "x-found-in": "query" }, "timeout": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "The period each update request waits for the following operations: dynamic mapping updates, waiting for active shards.\nBy default, it is one minute.\nThis guarantees Elasticsearch waits for at least the timeout before failing.\nThe actual wait time could be longer, particularly when multiple waits occur.", "x-found-in": "query" }, "version": { "type": "boolean", "description": "If `true`, returns the document version as part of a hit.", "x-found-in": "query" }, "version_type": { "type": "boolean", "description": "Should the document increment the version number (internal) on hit or not (reindex)", "x-found-in": "query" }, "wait_for_active_shards": { "$ref": "./_types.json#/$defs/_types__WaitForActiveShards", "description": "The number of shard copies that must be active before proceeding with the operation.\nSet to `all` or any positive integer up to the total number of shards in the index (`number_of_replicas+1`).\nThe `timeout` parameter controls how long each write request waits for unavailable shards to become available.\nBoth work exactly the way they work in the bulk API.\nUpdate by query uses scrolled searches, so you can also specify the `scroll` parameter to control how long it keeps the search context alive, for example `?scroll=10m`.", "x-found-in": "query" }, "wait_for_completion": { "type": "boolean", "description": "If `true`, the request blocks until the operation is complete.\nIf `false`, Elasticsearch performs some preflight checks, launches the request, and returns a task ID that you can use to cancel or get the status of the task.\nElasticsearch creates a record of this task as a document at `.tasks/task/${taskId}`.", "x-found-in": "query" }, "index": { "$ref": "./_types.json#/$defs/_types__Indices", "description": "A comma-separated list of data streams, indices, and aliases to search.\nIt supports wildcards (`*`).\nTo search all data streams or indices, omit this parameter or use `*` or `_all`.", "x-found-in": "path" } }, "required": ["index"], "description": "Update documents.\n\nUpdates documents that match the specified query.\nIf no query is specified, performs an update on every document in the data stream or index without modifying the source, which is useful for picking up mapping changes.\n\nIf the Elasticsearch security features are enabled, you must have the following index privileges for the target data stream, index, or alias:\n\n* `read`\n* `index` or `write`\n\nYou can specify the query criteria in the request URI or the request body using the same syntax as the search API.\n\nWhen you submit an update by query request, Elasticsearch gets a snapshot of the data stream or index when it begins processing the request and updates matching documents using internal versioning.\nWhen the versions match, the document is updated and the version number is incremented.\nIf a document changes between the time that the snapshot is taken and the update operation is processed, it results in a version conflict and the operation fails.\nYou can opt to count version conflicts instead of halting and returning by setting `conflicts` to `proceed`.\nNote that if you opt to count version conflicts, the operation could attempt to update more documents from the source than `max_docs` until it has successfully updated `max_docs` documents or it has gone through every document in the source query.\n\nNOTE: Documents with a version equal to 0 cannot be updated using update by query because internal versioning does not support 0 as a valid version number.\n\nWhile processing an update by query request, Elasticsearch performs multiple search requests sequentially to find all of the matching documents.\nA bulk update request is performed for each batch of matching documents.\nAny query or update failures cause the update by query request to fail and the failures are shown in the response.\nAny update requests that completed successfully still stick, they are not rolled back.\n\n**Refreshing shards**\n\nSpecifying the `refresh` parameter refreshes all shards once the request completes.\nThis is different to the update API's `refresh` parameter, which causes only the shard\nthat received the request to be refreshed. Unlike the update API, it does not support\n`wait_for`.\n\n**Running update by query asynchronously**\n\nIf the request contains `wait_for_completion=false`, Elasticsearch\nperforms some preflight checks, launches the request, and returns a\n[task](https://www.elastic.co/docs/api/doc/elasticsearch/group/endpoint-tasks) you can use to cancel or get the status of the task.\nElasticsearch creates a record of this task as a document at `.tasks/task/${taskId}`.\n\n**Throttling update requests**\n\nTo control the rate at which update by query issues batches of update operations, you can set `requests_per_second` to any positive decimal number.\nThis pads each batch with a wait time to throttle the rate.\nSet `requests_per_second` to `-1` to turn off throttling.\n\nThrottling uses a wait time between batches so that the internal scroll requests can be given a timeout that takes the request padding into account.\nThe padding time is the difference between the batch size divided by the `requests_per_second` and the time spent writing.\nBy default the batch size is 1000, so if `requests_per_second` is set to `500`:\n\n```\ntarget_time = 1000 / 500 per second = 2 seconds\nwait_time = target_time - write_time = 2 seconds - .5 seconds = 1.5 seconds\n```\n\nSince the batch is issued as a single _bulk request, large batch sizes cause Elasticsearch to create many requests and wait before starting the next set.\nThis is \"bursty\" instead of \"smooth\".\n\n**Slicing**\n\nUpdate by query supports sliced scroll to parallelize the update process.\nThis can improve efficiency and provide a convenient way to break the request down into smaller parts.\n\nSetting `slices` to `auto` chooses a reasonable number for most data streams and indices.\nThis setting will use one slice per shard, up to a certain limit.\nIf there are multiple source data streams or indices, it will choose the number of slices based on the index or backing index with the smallest number of shards.\n\nAdding `slices` to `_update_by_query` just automates the manual process of creating sub-requests, which means it has some quirks:\n\n* You can see these requests in the tasks APIs. These sub-requests are \"child\" tasks of the task for the request with slices.\n* Fetching the status of the task for the request with `slices` only contains the status of completed slices.\n* These sub-requests are individually addressable for things like cancellation and rethrottling.\n* Rethrottling the request with `slices` will rethrottle the unfinished sub-request proportionally.\n* Canceling the request with slices will cancel each sub-request.\n* Due to the nature of slices each sub-request won't get a perfectly even portion of the documents. All documents will be addressed, but some slices may be larger than others. Expect larger slices to have a more even distribution.\n* Parameters like `requests_per_second` and `max_docs` on a request with slices are distributed proportionally to each sub-request. Combine that with the point above about distribution being uneven and you should conclude that using `max_docs` with `slices` might not result in exactly `max_docs` documents being updated.\n* Each sub-request gets a slightly different snapshot of the source data stream or index though these are all taken at approximately the same time.\n\nIf you're slicing manually or otherwise tuning automatic slicing, keep in mind that:\n\n* Query performance is most efficient when the number of slices is equal to the number of shards in the index or backing index. If that number is large (for example, 500), choose a lower number as too many slices hurts performance. Setting slices higher than the number of shards generally does not improve efficiency and adds overhead.\n* Update performance scales linearly across available resources with the number of slices.\n\nWhether query or update performance dominates the runtime depends on the documents being reindexed and cluster resources.\nRefer to the linked documentation for examples of how to update documents using the `_update_by_query` API:" }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "update_by_query", "type": "object", "properties": { "allow_no_indices": { "type": "boolean", "description": "A setting that does two separate checks on the index expression.\nIf `false`, the request returns an error (1) if any wildcard expression\n(including `_all` and `*`) resolves to zero matching indices or (2) if the\ncomplete set of resolved indices, aliases or data streams is empty after all\nexpressions are evaluated. If `true`, index expressions that resolve to no\nindices are allowed and the request returns an empty result.", "x-found-in": "query" }, "analyzer": { "type": "string", "description": "The analyzer to use for the query string.\nThis parameter can be used only when the `q` query string parameter is specified.", "x-found-in": "query" }, "analyze_wildcard": { "type": "boolean", "description": "If `true`, wildcard and prefix queries are analyzed.\nThis parameter can be used only when the `q` query string parameter is specified.", "x-found-in": "query" }, "conflicts": { "$ref": "./_types.json#/$defs/_types__Conflicts", "description": "The preferred behavior when update by query hits version conflicts: `abort` or `proceed`.", "x-found-in": "body" }, "default_operator": { "$ref": "./_types.query_dsl.json#/$defs/_types.query_dsl__Operator", "description": "The default operator for query string query: `and` or `or`.\nThis parameter can be used only when the `q` query string parameter is specified.", "x-found-in": "query" }, "df": { "type": "string", "description": "The field to use as default where no field prefix is given in the query string.\nThis parameter can be used only when the `q` query string parameter is specified.", "x-found-in": "query" }, "expand_wildcards": { "$ref": "./_types.json#/$defs/_types__ExpandWildcards", "description": "The type of index that wildcard patterns can match.\nIf the request can target data streams, this argument determines whether wildcard expressions match hidden data streams.\nIt supports comma-separated values, such as `open,hidden`.", "x-found-in": "query" }, "from": { "type": "number", "description": "Skips the specified number of documents.", "x-found-in": "query" }, "ignore_unavailable": { "type": "boolean", "description": "If `false`, the request returns an error if it targets a concrete (non-wildcarded)\nindex, alias, or data stream that is missing, closed, or otherwise unavailable.\nIf `true`, unavailable concrete targets are silently ignored.", "x-found-in": "query" }, "lenient": { "type": "boolean", "description": "If `true`, format-based query failures (such as providing text to a numeric field) in the query string will be ignored.\nThis parameter can be used only when the `q` query string parameter is specified.", "x-found-in": "query" }, "max_docs": { "type": "number", "description": "The maximum number of documents to update.", "x-found-in": "body" }, "pipeline": { "type": "string", "description": "The ID of the pipeline to use to preprocess incoming documents.\nIf the index has a default ingest pipeline specified, then setting the value to `_none` disables the default ingest pipeline for this request.\nIf a final pipeline is configured it will always run, regardless of the value of this parameter.", "x-found-in": "query" }, "preference": { "type": "string", "description": "The node or shard the operation should be performed on.\nIt is random by default.", "x-found-in": "query" }, "q": { "type": "string", "description": "A query in the Lucene query string syntax.", "x-found-in": "query" }, "refresh": { "type": "boolean", "description": "If `true`, Elasticsearch refreshes affected shards to make the operation visible to search after the request completes.\nThis is different than the update API's `refresh` parameter, which causes just the shard that received the request to be refreshed.", "x-found-in": "query" }, "request_cache": { "type": "boolean", "description": "If `true`, the request cache is used for this request.\nIt defaults to the index-level setting.", "x-found-in": "query" }, "requests_per_second": { "type": "number", "description": "The maximum number of documents to update per second, across the entire update_by_query operation (including slices).\nIt can be either `-1` to turn off throttling or any decimal number like `1.7` or `12` to throttle to that level.", "x-found-in": "query" }, "routing": { "$ref": "./_types.json#/$defs/_types__Routing", "description": "A custom value used to route operations to a specific shard.\nNot allowed when `index.slice.enabled` is `true` for the target index; use `_slice` instead.", "x-found-in": "query" }, "scroll": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "The period to retain the search context for scrolling.", "x-found-in": "query" }, "scroll_size": { "type": "number", "description": "The size of the scroll request that powers the operation.", "x-found-in": "query" }, "search_timeout": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "An explicit timeout for each search request.\nBy default, there is no timeout.", "x-found-in": "query" }, "search_type": { "$ref": "./_types.json#/$defs/_types__SearchType", "description": "The type of the search operation. Available options include `query_then_fetch` and `dfs_query_then_fetch`.", "x-found-in": "query" }, "slices": { "$ref": "./_types.json#/$defs/_types__Slices", "description": "The number of slices this task should be divided into.", "x-found-in": "query" }, "sort": { "type": "array", "items": { "type": "string" }, "description": "A comma-separated list of <field>:<direction> pairs.", "x-found-in": "query" }, "stats": { "type": "array", "items": { "type": "string" }, "description": "The specific `tag` of the request for logging and statistical purposes.", "x-found-in": "query" }, "terminate_after": { "type": "number", "description": "The maximum number of documents to collect for each shard.\nIf a query reaches this limit, Elasticsearch terminates the query early.\nElasticsearch collects documents before sorting.\n\nIMPORTANT: Use with caution.\nElasticsearch applies this parameter to each shard handling the request.\nWhen possible, let Elasticsearch perform early termination automatically.\nAvoid specifying this parameter for requests that target data streams with backing indices across multiple data tiers.", "x-found-in": "query" }, "timeout": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "The period each update request waits for the following operations: dynamic mapping updates, waiting for active shards.\nBy default, it is one minute.\nThis guarantees Elasticsearch waits for at least the timeout before failing.\nThe actual wait time could be longer, particularly when multiple waits occur.", "x-found-in": "query" }, "version": { "type": "boolean", "description": "If `true`, returns the document version as part of a hit.", "x-found-in": "query" }, "version_type": { "type": "boolean", "description": "Should the document increment the version number (internal) on hit or not (reindex)", "x-found-in": "query" }, "wait_for_active_shards": { "$ref": "./_types.json#/$defs/_types__WaitForActiveShards", "description": "The number of shard copies that must be active before proceeding with the operation.\nSet to `all` or any positive integer up to the total number of shards in the index (`number_of_replicas+1`).\nThe `timeout` parameter controls how long each write request waits for unavailable shards to become available.\nBoth work exactly the way they work in the bulk API.\nUpdate by query uses scrolled searches, so you can also specify the `scroll` parameter to control how long it keeps the search context alive, for example `?scroll=10m`.", "x-found-in": "query" }, "wait_for_completion": { "type": "boolean", "description": "If `true`, the request blocks until the operation is complete.\nIf `false`, Elasticsearch performs some preflight checks, launches the request, and returns a task ID that you can use to cancel or get the status of the task.\nElasticsearch creates a record of this task as a document at `.tasks/task/${taskId}`.", "x-found-in": "query" }, "query": { "$ref": "./_types.query_dsl.json#/$defs/_types.query_dsl__QueryContainer", "description": "The documents to update using the Query DSL.", "x-found-in": "body" }, "script": { "$ref": "./_types.json#/$defs/_types__Script", "description": "The script to run to update the document source or metadata when updating.", "x-found-in": "body" }, "slice": { "$ref": "./_types.json#/$defs/_types__SlicedScroll", "description": "Slice the request manually using the provided slice ID and total number of slices.", "x-found-in": "body" }, "index": { "$ref": "./_types.json#/$defs/_types__Indices", "description": "A comma-separated list of data streams, indices, and aliases to search.\nIt supports wildcards (`*`).\nTo search all data streams or indices, omit this parameter or use `*` or `_all`.", "x-found-in": "path" } }, "required": ["index"], "description": "Update documents.\n\nUpdates documents that match the specified query.\nIf no query is specified, performs an update on every document in the data stream or index without modifying the source, which is useful for picking up mapping changes.\n\nIf the Elasticsearch security features are enabled, you must have the following index privileges for the target data stream, index, or alias:\n\n* `read`\n* `index` or `write`\n\nYou can specify the query criteria in the request URI or the request body using the same syntax as the search API.\n\nWhen you submit an update by query request, Elasticsearch gets a snapshot of the data stream or index when it begins processing the request and updates matching documents using internal versioning.\nWhen the versions match, the document is updated and the version number is incremented.\nIf a document changes between the time that the snapshot is taken and the update operation is processed, it results in a version conflict and the operation fails.\nYou can opt to count version conflicts instead of halting and returning by setting `conflicts` to `proceed`.\nNote that if you opt to count version conflicts, the operation could attempt to update more documents from the source than `max_docs` until it has successfully updated `max_docs` documents or it has gone through every document in the source query.\n\nNOTE: Documents with a version equal to 0 cannot be updated using update by query because internal versioning does not support 0 as a valid version number.\n\nWhile processing an update by query request, Elasticsearch performs multiple search requests sequentially to find all of the matching documents.\nA bulk update request is performed for each batch of matching documents.\nAny query or update failures cause the update by query request to fail and the failures are shown in the response.\nAny update requests that completed successfully still stick, they are not rolled back.\n\n**Refreshing shards**\n\nSpecifying the `refresh` parameter refreshes all shards once the request completes.\nThis is different to the update API's `refresh` parameter, which causes only the shard\nthat received the request to be refreshed. Unlike the update API, it does not support\n`wait_for`.\n\n**Running update by query asynchronously**\n\nIf the request contains `wait_for_completion=false`, Elasticsearch\nperforms some preflight checks, launches the request, and returns a\n[task](https://www.elastic.co/docs/api/doc/elasticsearch/group/endpoint-tasks) you can use to cancel or get the status of the task.\nElasticsearch creates a record of this task as a document at `.tasks/task/${taskId}`.\n\n**Throttling update requests**\n\nTo control the rate at which update by query issues batches of update operations, you can set `requests_per_second` to any positive decimal number.\nThis pads each batch with a wait time to throttle the rate.\nSet `requests_per_second` to `-1` to turn off throttling.\n\nThrottling uses a wait time between batches so that the internal scroll requests can be given a timeout that takes the request padding into account.\nThe padding time is the difference between the batch size divided by the `requests_per_second` and the time spent writing.\nBy default the batch size is 1000, so if `requests_per_second` is set to `500`:\n\n```\ntarget_time = 1000 / 500 per second = 2 seconds\nwait_time = target_time - write_time = 2 seconds - .5 seconds = 1.5 seconds\n```\n\nSince the batch is issued as a single _bulk request, large batch sizes cause Elasticsearch to create many requests and wait before starting the next set.\nThis is \"bursty\" instead of \"smooth\".\n\n**Slicing**\n\nUpdate by query supports sliced scroll to parallelize the update process.\nThis can improve efficiency and provide a convenient way to break the request down into smaller parts.\n\nSetting `slices` to `auto` chooses a reasonable number for most data streams and indices.\nThis setting will use one slice per shard, up to a certain limit.\nIf there are multiple source data streams or indices, it will choose the number of slices based on the index or backing index with the smallest number of shards.\n\nAdding `slices` to `_update_by_query` just automates the manual process of creating sub-requests, which means it has some quirks:\n\n* You can see these requests in the tasks APIs. These sub-requests are \"child\" tasks of the task for the request with slices.\n* Fetching the status of the task for the request with `slices` only contains the status of completed slices.\n* These sub-requests are individually addressable for things like cancellation and rethrottling.\n* Rethrottling the request with `slices` will rethrottle the unfinished sub-request proportionally.\n* Canceling the request with slices will cancel each sub-request.\n* Due to the nature of slices each sub-request won't get a perfectly even portion of the documents. All documents will be addressed, but some slices may be larger than others. Expect larger slices to have a more even distribution.\n* Parameters like `requests_per_second` and `max_docs` on a request with slices are distributed proportionally to each sub-request. Combine that with the point above about distribution being uneven and you should conclude that using `max_docs` with `slices` might not result in exactly `max_docs` documents being updated.\n* Each sub-request gets a slightly different snapshot of the source data stream or index though these are all taken at approximately the same time.\n\nIf you're slicing manually or otherwise tuning automatic slicing, keep in mind that:\n\n* Query performance is most efficient when the number of slices is equal to the number of shards in the index or backing index. If that number is large (for example, 500), choose a lower number as too many slices hurts performance. Setting slices higher than the number of shards generally does not improve efficiency and adds overhead.\n* Update performance scales linearly across available resources with the number of slices.\n\nWhether query or update performance dominates the runtime depends on the documents being reindexed and cluster resources.\nRefer to the linked documentation for examples of how to update documents using the `_update_by_query` API:" }

package/lib/cjs/es/json/watcher.execute_watch.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "watcher.execute_watch", "type": "object", "properties": { "action_modes": { "type": "object", "additionalProperties": { "$ref": "./watcher._types.json#/$defs/watcher._types__ActionExecutionMode" }, "description": "Determines how to handle the watch actions as part of the watch execution.", "x-found-in": "body" }, "alternative_input": { "type": "object", "additionalProperties": {}, "description": "When present, the watch uses this object as a payload instead of executing its own input.", "x-found-in": "body" }, "ignore_condition": { "type": "boolean", "description": "When set to `true`, the watch execution uses the always condition. This can also be specified as an HTTP parameter.", "x-found-in": "body" }, "record_execution": { "type": "boolean", "description": "When set to `true`, the watch record representing the watch execution result is persisted to the `.watcher-history` index for the current time.\nIn addition, the status of the watch is updated, possibly throttling subsequent runs.\nThis can also be specified as an HTTP parameter.", "x-found-in": "body" }, "simulated_actions": { "$ref": "./watcher._types.json#/$defs/watcher._types__SimulatedActions", "x-found-in": "body" }, "trigger_data": { "$ref": "./watcher._types.json#/$defs/watcher._types__ScheduleTriggerEvent", "description": "This structure is parsed as the data of the trigger event that will be used during the watch execution.", "x-found-in": "body" }, "watch": { "$ref": "./watcher._types.json#/$defs/watcher._types__Watch", "description": "When present, this watch is used instead of the one specified in the request.\nThis watch is not persisted to the index and `record_execution` cannot be set.", "x-found-in": "body" }, "debug": { "type": "boolean", "description": "Defines whether the watch runs in debug mode.", "x-found-in": "query" }, "id": { "type": "string", "description": "The watch identifier.", "x-found-in": "path" } }, "description": "Run a watch.\n\nThis API can be used to force execution of the watch outside of its triggering logic or to simulate the watch execution for debugging purposes.\n\nFor testing and debugging purposes, you also have fine-grained control on how the watch runs.\nYou can run the watch without running all of its actions or alternatively by simulating them.\nYou can also force execution by ignoring the watch condition and control whether a watch record would be written to the watch history after it runs.\n\nYou can use the run watch API to run watches that are not yet registered by specifying the watch definition inline.\nThis serves as great tool for testing and debugging your watches prior to adding them to Watcher.\n\nWhen Elasticsearch security features are enabled on your cluster, watches are run with the privileges of the user that stored the watches.\nIf your user is allowed to read index `a`, but not index `b`, then the exact same set of rules will apply during execution of a watch.\n\nWhen using the run watch API, the authorization data of the user that called the API will be used as a base, instead of the information who stored the watch.\nRefer to the external documentation for examples of watch execution requests, including existing, customized, and inline watches." }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "watcher.execute_watch", "type": "object", "properties": { "debug": { "type": "boolean", "description": "Defines whether the watch runs in debug mode.", "x-found-in": "query" }, "action_modes": { "type": "object", "additionalProperties": { "$ref": "./watcher._types.json#/$defs/watcher._types__ActionExecutionMode" }, "description": "Determines how to handle the watch actions as part of the watch execution.", "x-found-in": "body" }, "alternative_input": { "type": "object", "additionalProperties": {}, "description": "When present, the watch uses this object as a payload instead of executing its own input.", "x-found-in": "body" }, "ignore_condition": { "type": "boolean", "description": "When set to `true`, the watch execution uses the always condition. This can also be specified as an HTTP parameter.", "x-found-in": "body" }, "record_execution": { "type": "boolean", "description": "When set to `true`, the watch record representing the watch execution result is persisted to the `.watcher-history` index for the current time.\nIn addition, the status of the watch is updated, possibly throttling subsequent runs.\nThis can also be specified as an HTTP parameter.", "x-found-in": "body" }, "simulated_actions": { "$ref": "./watcher._types.json#/$defs/watcher._types__SimulatedActions", "x-found-in": "body" }, "trigger_data": { "$ref": "./watcher._types.json#/$defs/watcher._types__ScheduleTriggerEvent", "description": "This structure is parsed as the data of the trigger event that will be used during the watch execution.", "x-found-in": "body" }, "watch": { "$ref": "./watcher._types.json#/$defs/watcher._types__Watch", "description": "When present, this watch is used instead of the one specified in the request.\nThis watch is not persisted to the index and `record_execution` cannot be set.", "x-found-in": "body" }, "id": { "type": "string", "description": "The watch identifier.", "x-found-in": "path" } }, "description": "Run a watch.\n\nThis API can be used to force execution of the watch outside of its triggering logic or to simulate the watch execution for debugging purposes.\n\nFor testing and debugging purposes, you also have fine-grained control on how the watch runs.\nYou can run the watch without running all of its actions or alternatively by simulating them.\nYou can also force execution by ignoring the watch condition and control whether a watch record would be written to the watch history after it runs.\n\nYou can use the run watch API to run watches that are not yet registered by specifying the watch definition inline.\nThis serves as great tool for testing and debugging your watches prior to adding them to Watcher.\n\nWhen Elasticsearch security features are enabled on your cluster, watches are run with the privileges of the user that stored the watches.\nIf your user is allowed to read index `a`, but not index `b`, then the exact same set of rules will apply during execution of a watch.\n\nWhen using the run watch API, the authorization data of the user that called the API will be used as a base, instead of the information who stored the watch.\nRefer to the external documentation for examples of watch execution requests, including existing, customized, and inline watches." }

package/lib/cjs/es/json/watcher.put_watch.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "watcher.put_watch", "type": "object", "properties": { "actions": { "type": "object", "additionalProperties": { "$ref": "./watcher._types.json#/$defs/watcher._types__Action" }, "description": "The list of actions that will be run if the condition matches.", "x-found-in": "body" }, "condition": { "$ref": "./watcher._types.json#/$defs/watcher._types__ConditionContainer", "description": "The condition that defines if the actions should be run.", "x-found-in": "body" }, "input": { "$ref": "./watcher._types.json#/$defs/watcher._types__InputContainer", "description": "The input that defines the input that loads the data for the watch.", "x-found-in": "body" }, "metadata": { "$ref": "./_types.json#/$defs/_types__Metadata", "description": "Metadata JSON that will be copied into the history entries.", "x-found-in": "body" }, "throttle_period": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "The minimum time between actions being run.\nThe default is 5 seconds.\nThis default can be changed in the config file with the setting `xpack.watcher.throttle.period.default_period`.\nIf both this value and the `throttle_period_in_millis` parameter are specified, Watcher uses the last parameter included in the request.", "x-found-in": "body" }, "throttle_period_in_millis": { "description": "Minimum time in milliseconds between actions being run. Defaults to 5000. If both this value and the throttle_period parameter are specified, Watcher uses the last parameter included in the request.", "x-found-in": "body" }, "transform": { "$ref": "./_types.json#/$defs/_types__TransformContainer", "description": "The transform that processes the watch payload to prepare it for the watch actions.", "x-found-in": "body" }, "trigger": { "$ref": "./watcher._types.json#/$defs/watcher._types__TriggerContainer", "description": "The trigger that defines when the watch should run.", "x-found-in": "body" }, "active": { "type": "boolean", "description": "The initial state of the watch.\nThe default value is `true`, which means the watch is active by default.", "x-found-in": "query" }, "if_primary_term": { "type": "number", "description": "Only update the watch if the last operation that has changed the watch has the specified primary term", "x-found-in": "query" }, "if_seq_no": { "type": "number", "description": "Only update the watch if the last operation that has changed the watch has the specified sequence number", "x-found-in": "query" }, "version": { "type": "number", "description": "Explicit version number for concurrency control", "x-found-in": "query" }, "id": { "type": "string", "description": "The identifier for the watch.", "x-found-in": "path" } }, "required": ["id"], "description": "Create or update a watch.\n\nWhen a watch is registered, a new document that represents the watch is added to the `.watches` index and its trigger is immediately registered with the relevant trigger engine.\nTypically for the `schedule` trigger, the scheduler is the trigger engine.\n\nIMPORTANT: You must use Kibana or this API to create a watch.\nDo not add a watch directly to the `.watches` index by using the Elasticsearch index API.\nIf Elasticsearch security features are enabled, do not give users write privileges on the `.watches` index.\n\nWhen you add a watch you can also define its initial active state by setting the *active* parameter.\n\nWhen Elasticsearch security features are enabled, your watch can index or search only on indices for which the user that stored the watch has privileges.\nIf the user is able to read index `a`, but not index `b`, the same will apply when the watch runs." }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "watcher.put_watch", "type": "object", "properties": { "active": { "type": "boolean", "description": "The initial state of the watch.\nThe default value is `true`, which means the watch is active by default.", "x-found-in": "query" }, "if_primary_term": { "type": "number", "description": "Only update the watch if the last operation that has changed the watch has the specified primary term", "x-found-in": "query" }, "if_seq_no": { "type": "number", "description": "Only update the watch if the last operation that has changed the watch has the specified sequence number", "x-found-in": "query" }, "version": { "type": "number", "description": "Explicit version number for concurrency control", "x-found-in": "query" }, "actions": { "type": "object", "additionalProperties": { "$ref": "./watcher._types.json#/$defs/watcher._types__Action" }, "description": "The list of actions that will be run if the condition matches.", "x-found-in": "body" }, "condition": { "$ref": "./watcher._types.json#/$defs/watcher._types__ConditionContainer", "description": "The condition that defines if the actions should be run.", "x-found-in": "body" }, "input": { "$ref": "./watcher._types.json#/$defs/watcher._types__InputContainer", "description": "The input that defines the input that loads the data for the watch.", "x-found-in": "body" }, "metadata": { "$ref": "./_types.json#/$defs/_types__Metadata", "description": "Metadata JSON that will be copied into the history entries.", "x-found-in": "body" }, "throttle_period": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "The minimum time between actions being run.\nThe default is 5 seconds.\nThis default can be changed in the config file with the setting `xpack.watcher.throttle.period.default_period`.\nIf both this value and the `throttle_period_in_millis` parameter are specified, Watcher uses the last parameter included in the request.", "x-found-in": "body" }, "throttle_period_in_millis": { "description": "Minimum time in milliseconds between actions being run. Defaults to 5000. If both this value and the throttle_period parameter are specified, Watcher uses the last parameter included in the request.", "x-found-in": "body" }, "transform": { "$ref": "./_types.json#/$defs/_types__TransformContainer", "description": "The transform that processes the watch payload to prepare it for the watch actions.", "x-found-in": "body" }, "trigger": { "$ref": "./watcher._types.json#/$defs/watcher._types__TriggerContainer", "description": "The trigger that defines when the watch should run.", "x-found-in": "body" }, "id": { "type": "string", "description": "The identifier for the watch.", "x-found-in": "path" } }, "required": ["id"], "description": "Create or update a watch.\n\nWhen a watch is registered, a new document that represents the watch is added to the `.watches` index and its trigger is immediately registered with the relevant trigger engine.\nTypically for the `schedule` trigger, the scheduler is the trigger engine.\n\nIMPORTANT: You must use Kibana or this API to create a watch.\nDo not add a watch directly to the `.watches` index by using the Elasticsearch index API.\nIf Elasticsearch security features are enabled, do not give users write privileges on the `.watches` index.\n\nWhen you add a watch you can also define its initial active state by setting the *active* parameter.\n\nWhen Elasticsearch security features are enabled, your watch can index or search only on indices for which the user that stored the watch has privileges.\nIf the user is able to read index `a`, but not index `b`, the same will apply when the watch runs." }

package/lib/cjs/es/json/watcher.stats.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "watcher.stats", "type": "object", "properties": { "emit_stacktraces": { "type": "boolean", "description": "Defines whether stack traces are generated for each watch that is running.", "x-found-in": "query" }, "metric": { "oneOf": [{ "$ref": "./watcher.stats.json#/$defs/watcher.stats__WatcherMetric" }, { "type": "array", "items": { "$ref": "./watcher.stats.json#/$defs/watcher.stats__WatcherMetric" } }], "description": "Defines which additional metrics are included in the response.", "x-found-in": "path" } }, "description": "Get Watcher statistics.\n\nThis API always returns basic metrics.\nYou retrieve more metrics by using the metric parameter." }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "watcher.stats", "type": "object", "properties": { "emit_stacktraces": { "type": "boolean", "description": "Defines whether stack traces are generated for each watch that is running.", "x-found-in": "query" }, "metric": { "anyOf": [{ "$ref": "./watcher.stats.json#/$defs/watcher.stats__WatcherMetric" }, { "type": "array", "items": { "$ref": "./watcher.stats.json#/$defs/watcher.stats__WatcherMetric" } }], "description": "Defines which additional metrics are included in the response.", "x-found-in": "path" } }, "description": "Get Watcher statistics.\n\nThis API always returns basic metrics.\nYou retrieve more metrics by using the metric parameter." }

package/lib/cjs/es/json/watcher.update_settings.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "watcher.update_settings", "type": "object", "properties": { "index.auto_expand_replicas": { "type": "string", "x-found-in": "body" }, "index.number_of_replicas": { "type": "number", "x-found-in": "body" }, "master_timeout": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "The period to wait for a connection to the master node.\nIf no response is received before the timeout expires, the request fails and returns an error.", "x-found-in": "query" }, "timeout": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "The period to wait for a response.\nIf no response is received before the timeout expires, the request fails and returns an error.", "x-found-in": "query" } }, "description": "Update Watcher index settings.\n\nUpdate settings for the Watcher internal index (`.watches`).\nOnly a subset of settings can be modified.\nThis includes `index.auto_expand_replicas`, `index.number_of_replicas`, `index.routing.allocation.exclude.*`,\n`index.routing.allocation.include.*` and `index.routing.allocation.require.*`.\nModification of `index.routing.allocation.include._tier_preference` is an exception and is not allowed as the\nWatcher shards must always be in the `data_content` tier." }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "watcher.update_settings", "type": "object", "properties": { "master_timeout": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "The period to wait for a connection to the master node.\nIf no response is received before the timeout expires, the request fails and returns an error.", "x-found-in": "query" }, "timeout": { "$ref": "./_types.json#/$defs/_types__Duration", "description": "The period to wait for a response.\nIf no response is received before the timeout expires, the request fails and returns an error.", "x-found-in": "query" }, "index.auto_expand_replicas": { "type": "string", "x-found-in": "body" }, "index.number_of_replicas": { "type": "number", "x-found-in": "body" } }, "description": "Update Watcher index settings.\n\nUpdate settings for the Watcher internal index (`.watches`).\nOnly a subset of settings can be modified.\nThis includes `index.auto_expand_replicas`, `index.number_of_replicas`, `index.routing.allocation.exclude.*`,\n`index.routing.allocation.include.*` and `index.routing.allocation.require.*`.\nModification of `index.routing.allocation.include._tier_preference` is an exception and is not allowed as the\nWatcher shards must always be in the `data_content` tier." }

package/lib/cjs/es/schemas/indices.forcemerge.d.ts

@@ -159,7 +159,6 @@ export type long = z.infer<typeof long>;
  * If the request contains `wait_for_completion=false`, Elasticsearch performs some preflight checks, launches the request, and returns a task you can use to get the status of the task.
  * However, you can not cancel this task as the force merge task is not cancelable.
  * Elasticsearch creates a record of this task as a document at `_tasks/<task_id>`.
- * When you are done with a task, you should delete the task document so Elasticsearch can reclaim the space.
  *
  * **Force merging multiple indices**
  *
@@ -170,9 +169,9 @@ export type long = z.infer<typeof long>;
  * * One or more aliases
  * * All data streams and indices in a cluster
  *
- * Each targeted shard is force-merged separately using the force_merge threadpool.
- * By default each node only has a single `force_merge` thread which means that the shards on that node are force-merged one at a time.
- * If you expand the `force_merge` threadpool on a node then it will force merge its shards in parallel
+ * Each targeted shard is force-merged separately using the `force_merge` threadpool.
+ * The `force_merge` threadpool has a fixed size of `max(1, allocatedProcessors / 8)` per node, which means multiple shards on a node may be force-merged in parallel.
+ * If you expand the `force_merge` threadpool on a node then it will force merge its shards with more parallelism.
  *
  * Force merge makes the storage for the shard being merged temporarily increase, as it may require free space up to triple its size in case `max_num_segments parameter` is set to `1`, to rewrite all segments into a new one.
  *

package/lib/cjs/es/schemas/indices.forcemerge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"indices.forcemerge.d.ts","sourceRoot":"","sources":["../../../../src/es/schemas/indices.forcemerge.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;;;GAIG;AACH,eAAO,MAAM,IAAI,oCAAgC,CAAA;AACjD,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAA;AAEvC,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAA;IAClC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,SAAS,CAAC,EAAE,eAAe,GAAG,SAAS,CAAA;IACvC,UAAU,CAAC,EAAE,eAAe,EAAE,GAAG,SAAS,CAAA;IAC1C,UAAU,CAAC,EAAE,eAAe,EAAE,GAAG,SAAS,CAAA;CAC3C;AACD;;;GAGG;AACH,eAAO,MAAM,UAAU;;;;;;;iBAOM,CAAA;AAC7B,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAA;AAEnD,eAAO,MAAM,cAAc;;;;;;EAAqF,CAAA;AAChH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA;AAE3D,eAAO,MAAM,eAAe;;;;;;;;;;;;KAAqF,CAAA;AACjH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AAE7D,eAAO,MAAM,SAAS,aAAuC,CAAA;AAC7D,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAA;AAEjD,eAAO,MAAM,OAAO,6DAAmE,CAAA;AACvF,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAA;AAE7C,eAAO,MAAM,WAAW,gCACM,CAAA;AAC9B,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAA;AAErD,eAAO,MAAM,OAAO,aAAqC,CAAA;AACzD,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAA;AAE7C,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;iBAUM,CAAA;AAC/B,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAA;AAEvD,eAAO,MAAM,IAAI,aAAkC,CAAA;AACnD,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAA;AAEvC,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;iBAMM,CAAA;AAClC,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AAE7D,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;iBAEM,CAAA;AAC9C,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAA;AAErF,eAAO,MAAM,IAAI,aAAkC,CAAA;AACnD,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAA;AAEvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;iBAUM,CAAA;AAC3C,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAE/E,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;iBAGM,CAAA;AAC1D,MAAM,MAAM,uCAAuC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAA;AAE7G,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAoF,CAAA;AAC1H,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAA"}
+{"version":3,"file":"indices.forcemerge.d.ts","sourceRoot":"","sources":["../../../../src/es/schemas/indices.forcemerge.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;;;GAIG;AACH,eAAO,MAAM,IAAI,oCAAgC,CAAA;AACjD,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAA;AAEvC,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAA;IAClC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,SAAS,CAAC,EAAE,eAAe,GAAG,SAAS,CAAA;IACvC,UAAU,CAAC,EAAE,eAAe,EAAE,GAAG,SAAS,CAAA;IAC1C,UAAU,CAAC,EAAE,eAAe,EAAE,GAAG,SAAS,CAAA;CAC3C;AACD;;;GAGG;AACH,eAAO,MAAM,UAAU;;;;;;;iBAOM,CAAA;AAC7B,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAA;AAEnD,eAAO,MAAM,cAAc;;;;;;EAAqF,CAAA;AAChH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA;AAE3D,eAAO,MAAM,eAAe;;;;;;;;;;;;KAAqF,CAAA;AACjH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AAE7D,eAAO,MAAM,SAAS,aAAuC,CAAA;AAC7D,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAA;AAEjD,eAAO,MAAM,OAAO,6DAAmE,CAAA;AACvF,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAA;AAE7C,eAAO,MAAM,WAAW,gCACM,CAAA;AAC9B,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAA;AAErD,eAAO,MAAM,OAAO,aAAqC,CAAA;AACzD,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAA;AAE7C,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;iBAUM,CAAA;AAC/B,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAA;AAEvD,eAAO,MAAM,IAAI,aAAkC,CAAA;AACnD,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAA;AAEvC,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;iBAMM,CAAA;AAClC,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AAE7D,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;iBAEM,CAAA;AAC9C,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAA;AAErF,eAAO,MAAM,IAAI,aAAkC,CAAA;AACnD,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAA;AAEvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;iBAUM,CAAA;AAC3C,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAE/E,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;iBAGM,CAAA;AAC1D,MAAM,MAAM,uCAAuC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAA;AAE7G,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAoF,CAAA;AAC1H,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAA"}

package/lib/cjs/es/schemas/indices.forcemerge.js

@@ -82,7 +82,6 @@ exports.long = zod_1.z.number().meta({ id: 'long' });
  * If the request contains `wait_for_completion=false`, Elasticsearch performs some preflight checks, launches the request, and returns a task you can use to get the status of the task.
  * However, you can not cancel this task as the force merge task is not cancelable.
  * Elasticsearch creates a record of this task as a document at `_tasks/<task_id>`.
- * When you are done with a task, you should delete the task document so Elasticsearch can reclaim the space.
  *
  * **Force merging multiple indices**
  *
@@ -93,9 +92,9 @@ exports.long = zod_1.z.number().meta({ id: 'long' });
  * * One or more aliases
  * * All data streams and indices in a cluster
  *
- * Each targeted shard is force-merged separately using the force_merge threadpool.
- * By default each node only has a single `force_merge` thread which means that the shards on that node are force-merged one at a time.
- * If you expand the `force_merge` threadpool on a node then it will force merge its shards in parallel
+ * Each targeted shard is force-merged separately using the `force_merge` threadpool.
+ * The `force_merge` threadpool has a fixed size of `max(1, allocatedProcessors / 8)` per node, which means multiple shards on a node may be force-merged in parallel.
+ * If you expand the `force_merge` threadpool on a node then it will force merge its shards with more parallelism.
  *
  * Force merge makes the storage for the shard being merged temporarily increase, as it may require free space up to triple its size in case `max_num_segments parameter` is set to `1`, to rewrite all segments into a new one.
  *

package/lib/cjs/es/schemas/indices.forcemerge.js.map

@@ -1 +1 @@
-{"version":3,"file":"indices.forcemerge.js","sourceRoot":"","sources":["../../../../src/es/schemas/indices.forcemerge.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,cAAc;AAEd,oDAAoD;AACpD,6BAAuB;AAEvB;;;;GAIG;AACU,QAAA,IAAI,GAAG,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC,CAAA;AAWjD;;;GAGG;AACU,QAAA,UAAU,GAAG,OAAC,CAAC,WAAW,CAAC;IACtC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IAC9C,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,wDAAwD,CAAC,CAAC,QAAQ,EAAE;IACrH,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qGAAqG,CAAC,CAAC,QAAQ,EAAE;IAClJ,IAAI,SAAS,KAAM,OAAO,kBAAU,CAAC,QAAQ,EAAE,CAAA,CAAC,CAAC;IACjD,IAAI,UAAU,KAAM,OAAO,kBAAU,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAA,CAAC,CAAC;IAC1D,IAAI,UAAU,KAAM,OAAO,kBAAU,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAA,CAAC,CAAC;CAC3D,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAA;AAGhB,QAAA,cAAc,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAA;AAGnG,QAAA,eAAe,GAAG,OAAC,CAAC,KAAK,CAAC,CAAC,sBAAc,EAAE,OAAC,CAAC,KAAK,CAAC,sBAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAA;AAGpG,QAAA,SAAS,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAA;AAGhD,QAAA,OAAO,GAAG,OAAC,CAAC,KAAK,CAAC,CAAC,iBAAS,EAAE,OAAC,CAAC,KAAK,CAAC,iBAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;AAG1E,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC,EACnC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAA;AAGjB,QAAA,OAAO,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;AAG5C,QAAA,YAAY,GAAG,OAAC,CAAC,MAAM,CAAC;IACnC,KAAK,EAAE,iBAAS,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,iBAAS,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,kBAAU,CAAC;IAChC,KAAK,EAAE,eAAO,CAAC,QAAQ,EAAE;IACzB,MAAM,EAAE,eAAO,CAAC,QAAQ,EAAE;IAC1B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAA;AAGlB,QAAA,IAAI,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;AAGtC,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,YAAI,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IACrG,UAAU,EAAE,YAAI,CAAC,QAAQ,CAAC,4DAA4D,CAAC;IACvF,KAAK,EAAE,YAAI,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IACzF,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,oBAAY,CAAC,CAAC,QAAQ,EAAE;IAC1C,OAAO,EAAE,YAAI,CAAC,QAAQ,EAAE;CACzB,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAA;AAGrB,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,uBAAe,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,6BAA6B,EAAE,CAAC,CAAA;AAGjC,QAAA,IAAI,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;AAGnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACU,QAAA,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC/C,GAAG,mBAAW,CAAC,KAAK;IACpB,KAAK,EAAE,eAAO,CAAC,QAAQ,CAAC,2GAA2G,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC1K,gBAAgB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,0aAA0a,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACzf,gBAAgB,EAAE,uBAAe,CAAC,QAAQ,CAAC,0FAA0F,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC7K,KAAK,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,4EAA4E,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAChJ,kBAAkB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,kOAAkO,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACnT,gBAAgB,EAAE,YAAI,CAAC,QAAQ,CAAC,2EAA2E,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACnJ,oBAAoB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,qEAAqE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACxJ,mBAAmB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;CAC/I,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,0BAA0B,EAAE,CAAC,CAAA;AAG9B,QAAA,uCAAuC,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9D,GAAG,mCAA2B,CAAC,KAAK;IACpC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4IAA4I,CAAC,CAAC,QAAQ,EAAE;CACnL,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,yCAAyC,EAAE,CAAC,CAAA;AAG7C,QAAA,yBAAyB,GAAG,+CAAuC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,2BAA2B,EAAE,CAAC,CAAA"}
+{"version":3,"file":"indices.forcemerge.js","sourceRoot":"","sources":["../../../../src/es/schemas/indices.forcemerge.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,cAAc;AAEd,oDAAoD;AACpD,6BAAuB;AAEvB;;;;GAIG;AACU,QAAA,IAAI,GAAG,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC,CAAA;AAWjD;;;GAGG;AACU,QAAA,UAAU,GAAG,OAAC,CAAC,WAAW,CAAC;IACtC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IAC9C,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,wDAAwD,CAAC,CAAC,QAAQ,EAAE;IACrH,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qGAAqG,CAAC,CAAC,QAAQ,EAAE;IAClJ,IAAI,SAAS,KAAM,OAAO,kBAAU,CAAC,QAAQ,EAAE,CAAA,CAAC,CAAC;IACjD,IAAI,UAAU,KAAM,OAAO,kBAAU,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAA,CAAC,CAAC;IAC1D,IAAI,UAAU,KAAM,OAAO,kBAAU,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAA,CAAC,CAAC;CAC3D,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAA;AAGhB,QAAA,cAAc,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAA;AAGnG,QAAA,eAAe,GAAG,OAAC,CAAC,KAAK,CAAC,CAAC,sBAAc,EAAE,OAAC,CAAC,KAAK,CAAC,sBAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAA;AAGpG,QAAA,SAAS,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAA;AAGhD,QAAA,OAAO,GAAG,OAAC,CAAC,KAAK,CAAC,CAAC,iBAAS,EAAE,OAAC,CAAC,KAAK,CAAC,iBAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;AAG1E,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC,EACnC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAA;AAGjB,QAAA,OAAO,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;AAG5C,QAAA,YAAY,GAAG,OAAC,CAAC,MAAM,CAAC;IACnC,KAAK,EAAE,iBAAS,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,iBAAS,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,kBAAU,CAAC;IAChC,KAAK,EAAE,eAAO,CAAC,QAAQ,EAAE;IACzB,MAAM,EAAE,eAAO,CAAC,QAAQ,EAAE;IAC1B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAA;AAGlB,QAAA,IAAI,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;AAGtC,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,YAAI,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IACrG,UAAU,EAAE,YAAI,CAAC,QAAQ,CAAC,4DAA4D,CAAC;IACvF,KAAK,EAAE,YAAI,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IACzF,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,oBAAY,CAAC,CAAC,QAAQ,EAAE;IAC1C,OAAO,EAAE,YAAI,CAAC,QAAQ,EAAE;CACzB,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAA;AAGrB,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,uBAAe,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,6BAA6B,EAAE,CAAC,CAAA;AAGjC,QAAA,IAAI,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;AAGnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AACU,QAAA,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC/C,GAAG,mBAAW,CAAC,KAAK;IACpB,KAAK,EAAE,eAAO,CAAC,QAAQ,CAAC,2GAA2G,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC1K,gBAAgB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,0aAA0a,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACzf,gBAAgB,EAAE,uBAAe,CAAC,QAAQ,CAAC,0FAA0F,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC7K,KAAK,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,4EAA4E,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAChJ,kBAAkB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,kOAAkO,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACnT,gBAAgB,EAAE,YAAI,CAAC,QAAQ,CAAC,2EAA2E,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACnJ,oBAAoB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,qEAAqE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACxJ,mBAAmB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;CAC/I,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,0BAA0B,EAAE,CAAC,CAAA;AAG9B,QAAA,uCAAuC,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9D,GAAG,mCAA2B,CAAC,KAAK;IACpC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4IAA4I,CAAC,CAAC,QAAQ,EAAE;CACnL,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,yCAAyC,EAAE,CAAC,CAAA;AAG7C,QAAA,yBAAyB,GAAG,+CAAuC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,2BAA2B,EAAE,CAAC,CAAA"}

package/lib/cjs/kibana/json/assign_watchlist_entities.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "watchlist_id": { "type": "string", "description": "The ID of the watchlist to add entities to", "x-found-in": "path" } }, "required": ["watchlist_id"], "allOf": [{ "type": "object", "properties": { "euids": { "type": "array", "items": { "type": "string" }, "description": "The EUIDs of the entities to assign" } }, "required": ["euids"] }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "AssignWatchlistEntities" }

package/lib/cjs/kibana/json/attack_discovery_find.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "alert_ids": { "type": "string", "description": "Filter results to Attack discoveries that include any of the provided alert IDs", "x-found-in": "query" }, "connector_names": { "type": "string", "description": "Filter results to Attack discoveries created by any of the provided human readable connector names. Note that values must match the human readable `connector_name` property of an Attack discovery, e.g. \"GPT-5 Chat\", which are distinct from `connector_id` values used to generate Attack discoveries.", "x-found-in": "query" }, "enable_field_rendering": { "type": "boolean", "description": "Enables a markdown syntax used to render pivot fields, for example `{{ user.name james }}`. When disabled, the same example would be rendered as `james`. This is primarily used for Attack Discovery views within Kibana. Defaults to `false`.", "x-found-in": "query" }, "end": { "type": "string", "description": "End of the time range for the search. Accepts absolute timestamps (ISO 8601) or relative date math (e.g. \"now\", \"now-24h\").", "x-found-in": "query" }, "ids": { "type": "string", "description": "Filter results to the Attack discoveries with the specified IDs", "x-found-in": "query" }, "include_unique_alert_ids": { "type": "boolean", "description": "If `true`, the response will include `unique_alert_ids` and `unique_alert_ids_count` aggregated across the matched Attack discoveries", "x-found-in": "query" }, "page": { "type": "number", "description": "Page number to return (used for pagination). Defaults to 1.", "x-found-in": "query" }, "per_page": { "type": "number", "description": "Number of Attack discoveries to return per page (used for pagination). Defaults to 10.", "x-found-in": "query" }, "search": { "type": "string", "description": "Free-text search query applied to relevant text fields of Attack discoveries (title, description, tags, etc.)", "x-found-in": "query" }, "shared": { "type": "boolean", "description": "Whether to filter by shared visibility. If omitted, both shared and privately visible Attack discoveries are returned. Use `true` to return only shared discoveries, `false` to return only those visible to the current user. Mutually exclusive with `include_all_authors`.", "x-found-in": "query" }, "include_all_authors": { "type": "boolean", "description": "If `true`, the response will include all attack discoveries matching other criteria regardless of who created them. Mutually exclusive with `shared`.", "x-found-in": "query" }, "scheduled": { "type": "boolean", "description": "Whether to filter by scheduled or ad-hoc attack discoveries. If omitted, both types of attack discoveries are returned. Use `true` to return only scheduled discoveries or `false` to return only ad-hoc discoveries.", "x-found-in": "query" }, "sort_field": { "type": "string", "description": "Field used to sort results. See `AttackDiscoveryFindSortField` for allowed values.", "x-found-in": "query" }, "sort_order": { "type": "string", "description": "Sort order direction `asc` for ascending or `desc` for descending. Defaults to `desc`.", "x-found-in": "query" }, "start": { "type": "string", "description": "Start of the time range for the search. Accepts absolute timestamps (ISO 8601) or relative date math (e.g. \"now-7d\").", "x-found-in": "query" }, "status": { "type": "string", "description": "Filter by alert workflow status. Provide one or more of the allowed workflow states.", "x-found-in": "query" }, "with_replacements": { "type": "boolean", "description": "When true, return the created Attack discoveries with text replacements applied to the detailsMarkdown, entitySummaryMarkdown, summaryMarkdown, and title fields. Defaults to `true`.", "x-found-in": "query" } }, "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "AttackDiscoveryFind" }

package/lib/cjs/kibana/json/bulk_delete_attack_discovery_schedules.request.json

@@ -0,0 +1 @@
+{ "$ref": "./_defs.json#/$defs/Security_Attack_discovery_API_BulkActionAttackDiscoverySchedulesRequestBody", "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "BulkDeleteAttackDiscoverySchedules" }

package/lib/cjs/kibana/json/bulk_delete_op.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "spaceId": { "type": "string", "description": "The spaceId parameter", "x-found-in": "path" } }, "required": ["spaceId"], "allOf": [{ "$ref": "./_defs.json#/$defs/SLOs_bulk_delete_request" }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "bulkDeleteOp" }

package/lib/cjs/kibana/json/bulk_delete_status_op.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "taskId": { "type": "string", "description": "The task id of the bulk delete operation", "x-found-in": "path" }, "spaceId": { "type": "string", "description": "The spaceId parameter", "x-found-in": "path" } }, "required": ["taskId", "spaceId"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "bulkDeleteStatusOp" }

package/lib/cjs/kibana/json/bulk_disable_attack_discovery_schedules.request.json

@@ -0,0 +1 @@
+{ "$ref": "./_defs.json#/$defs/Security_Attack_discovery_API_BulkActionAttackDiscoverySchedulesRequestBody", "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "BulkDisableAttackDiscoverySchedules" }

package/lib/cjs/kibana/json/bulk_enable_attack_discovery_schedules.request.json

@@ -0,0 +1 @@
+{ "$ref": "./_defs.json#/$defs/Security_Attack_discovery_API_BulkActionAttackDiscoverySchedulesRequestBody", "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "BulkEnableAttackDiscoverySchedules" }

package/lib/cjs/kibana/json/bulk_upsert_asset_criticality_records.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "records": { "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "criticality_level": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityLevelsForBulkUpload" } }, "required": ["criticality_level"] }, { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityRecordIdParts" }] } } }, "required": ["records"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "BulkUpsertAssetCriticalityRecords" }

package/lib/cjs/kibana/json/cancel_action.request.json

@@ -0,0 +1 @@
+{ "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_CancelRouteRequestBody", "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "CancelAction" }

package/lib/cjs/kibana/json/chat_complete.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "content_references_disabled": { "type": "boolean", "description": "If true, the response will not include content references.", "x-found-in": "query" } }, "allOf": [{ "$ref": "./_defs.json#/$defs/Security_AI_Assistant_API_ChatCompleteProps" }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "ChatComplete" }

package/lib/cjs/kibana/json/clean_draft_timelines.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "timelineType": { "$ref": "./_defs.json#/$defs/Security_Timeline_API_TimelineType" } }, "required": ["timelineType"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "CleanDraftTimelines" }

package/lib/cjs/kibana/json/configure_risk_engine_saved_object.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "enable_reset_to_zero": { "type": "boolean" }, "exclude_alert_statuses": { "type": "array", "items": { "type": "string" } }, "exclude_alert_tags": { "type": "array", "items": { "type": "string" } }, "filters": { "type": "array", "items": { "type": "object", "properties": { "entity_types": { "type": "array", "items": { "enum": ["host", "user", "service"] } }, "filter": { "type": "string", "description": "KQL filter string" } }, "required": ["entity_types", "filter"] } }, "page_size": { "type": "number", "description": "Number of entities to score per page. Higher values reduce total scoring time by reducing the number of alert-index scans, but cannot exceed the ES|QL result limit (10,000 by default).\n" }, "range": { "type": "object", "properties": { "end": { "type": "string" }, "start": { "type": "string" } } } }, "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "ConfigureRiskEngineSavedObject" }

package/lib/cjs/kibana/json/copy_timeline.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "timeline": { "$ref": "./_defs.json#/$defs/Security_Timeline_API_SavedTimeline" }, "timelineIdToCopy": { "type": "string", "description": "The `savedObjectId` of the timeline or template to duplicate." } }, "required": ["timeline", "timelineIdToCopy"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "CopyTimeline" }

package/lib/cjs/kibana/json/create_agent_key.request.json

@@ -0,0 +1 @@
+{ "$ref": "./_defs.json#/$defs/APM_UI_agent_keys_object", "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "createAgentKey" }

package/lib/cjs/kibana/json/create_annotation.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "serviceName": { "type": "string", "description": "The name of the service", "x-found-in": "path" } }, "required": ["serviceName"], "allOf": [{ "$ref": "./_defs.json#/$defs/APM_UI_create_annotation_object" }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "createAnnotation" }

package/lib/cjs/kibana/json/create_asset_criticality_record.request.json

@@ -0,0 +1 @@
+{ "oneOf": [{ "type": "object", "properties": { "refresh": { "enum": ["wait_for"], "description": "If 'wait_for' the request will wait for the index refresh." } } }, { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_CreateAssetCriticalityRecord" }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "CreateAssetCriticalityRecord" }

package/lib/cjs/kibana/json/create_attack_discovery_schedules.request.json

@@ -0,0 +1 @@
+{ "$ref": "./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiScheduleCreateProps", "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "CreateAttackDiscoverySchedules" }

package/lib/cjs/kibana/json/create_conversation.request.json

@@ -0,0 +1 @@
+{ "$ref": "./_defs.json#/$defs/Security_AI_Assistant_API_ConversationCreateProps", "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "CreateConversation" }

package/lib/cjs/kibana/json/create_data_view_defaultw.request.json

@@ -0,0 +1 @@
+{ "$ref": "./_defs.json#/$defs/Data_views_create_data_view_request_object", "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "createDataViewDefaultw" }

package/lib/cjs/kibana/json/create_endpoint_list_item.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "comments": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemCommentArray" }, "description": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemDescription" }, "entries": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemEntryArray" }, "item_id": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemHumanId" }, "meta": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemMeta" }, "name": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemName" }, "os_types": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemOsTypeArray" }, "tags": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemTags" }, "type": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemType" } }, "required": ["type", "name", "description", "entries"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "CreateEndpointListItem" }

package/lib/cjs/kibana/json/create_exception_list.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "description": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_ExceptionListDescription" }, "list_id": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_ExceptionListHumanId" }, "meta": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_ExceptionListMeta" }, "name": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_ExceptionListName" }, "namespace_type": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_ExceptionNamespaceType" }, "os_types": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_ExceptionListOsTypeArray" }, "tags": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_ExceptionListTags" }, "type": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_ExceptionListType" }, "version": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_ExceptionListVersion" } }, "required": ["name", "description", "type"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "CreateExceptionList" }

package/lib/cjs/kibana/json/create_knowledge_base.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "resource": { "type": "string", "description": "The KnowledgeBase `resource` value.", "x-found-in": "path" }, "modelId": { "type": "string", "description": "ELSER modelId to use when setting up the Knowledge Base. If not provided, a default model will be used.", "x-found-in": "query" }, "ignoreSecurityLabs": { "type": "boolean", "description": "Indicates whether we should or should not install Security Labs docs when setting up the Knowledge Base. Defaults to `false`.", "x-found-in": "query" } }, "required": ["resource"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "CreateKnowledgeBase" }

package/lib/cjs/kibana/json/create_list.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "description": { "$ref": "./_defs.json#/$defs/Security_Lists_API_ListDescription" }, "id": { "$ref": "./_defs.json#/$defs/Security_Lists_API_ListId" }, "meta": { "$ref": "./_defs.json#/$defs/Security_Lists_API_ListMetadata" }, "name": { "$ref": "./_defs.json#/$defs/Security_Lists_API_ListName" }, "type": { "$ref": "./_defs.json#/$defs/Security_Lists_API_ListType" }, "version": { "type": "number" } }, "required": ["name", "description", "type"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "CreateList" }

package/lib/cjs/kibana/json/create_list_item.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "$ref": "./_defs.json#/$defs/Security_Lists_API_ListItemId" }, "list_id": { "$ref": "./_defs.json#/$defs/Security_Lists_API_ListId" }, "meta": { "$ref": "./_defs.json#/$defs/Security_Lists_API_ListItemMetadata" }, "refresh": { "enum": ["true", "false", "wait_for"], "description": "Determines when changes made by the request are made visible to search." }, "value": { "$ref": "./_defs.json#/$defs/Security_Lists_API_ListItemValue" } }, "required": ["list_id", "value"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "CreateListItem" }

package/lib/cjs/kibana/json/create_priv_mon_user.request.json

@@ -0,0 +1 @@
+{ "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_UserName", "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "CreatePrivMonUser" }

package/lib/cjs/kibana/json/create_rule_exception_list_items.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "type": "string", "description": "Detection rule's identifier", "x-found-in": "path" } }, "required": ["id"], "allOf": [{ "type": "object", "properties": { "items": { "type": "array", "items": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_CreateRuleExceptionListItemProps" } } }, "required": ["items"] }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "CreateRuleExceptionListItems" }

package/lib/cjs/kibana/json/create_runtime_field_default.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "viewId": { "type": "string", "description": "The viewId parameter", "x-found-in": "path" } }, "required": ["viewId"], "allOf": [{ "type": "object", "properties": { "name": { "type": "string", "description": "The name for a runtime field.\n" }, "runtimeField": { "type": "object", "description": "The runtime field definition object.\n" } }, "required": ["name", "runtimeField"] }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "createRuntimeFieldDefault" }

package/lib/cjs/kibana/json/create_shared_exception_list.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "description": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_ExceptionListDescription" }, "name": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_ExceptionListName" } }, "required": ["name", "description"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "CreateSharedExceptionList" }

package/lib/cjs/kibana/json/create_slo_op.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "spaceId": { "type": "string", "description": "The spaceId parameter", "x-found-in": "path" } }, "required": ["spaceId"], "allOf": [{ "$ref": "./_defs.json#/$defs/SLOs_create_slo_request" }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "createSloOp" }

package/lib/cjs/kibana/json/create_timelines.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "status": { "$ref": "./_defs.json#/$defs/Security_Timeline_API_TimelineStatus" }, "templateTimelineId": { "oneOf": [{ "type": "string" }, { "type": "null" }], "description": "A unique identifier for the Timeline template." }, "templateTimelineVersion": { "oneOf": [{ "type": "number" }, { "type": "null" }], "description": "Timeline template version number." }, "timeline": { "$ref": "./_defs.json#/$defs/Security_Timeline_API_SavedTimeline" }, "timelineId": { "oneOf": [{ "type": "string" }, { "type": "null" }], "description": "A unique identifier for the Timeline." }, "timelineType": { "$ref": "./_defs.json#/$defs/Security_Timeline_API_TimelineType" }, "version": { "oneOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["timeline"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "CreateTimelines" }

package/lib/cjs/kibana/json/create_update_agent_configuration.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "overwrite": { "type": "boolean", "description": "If the config exists ?overwrite=true is required", "x-found-in": "query" } }, "allOf": [{ "$ref": "./_defs.json#/$defs/APM_UI_agent_configuration_intake_object" }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "createUpdateAgentConfiguration" }