@elastic/schemas 0.4.5 → 0.5.0

package/lib/cjs/kibana/json/put_fleet_fleet_server_hosts_itemid.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "itemId": { "type": "string", "description": "The ID of the Fleet Server host", "x-found-in": "path" } }, "required": ["itemId"], "allOf": [{ "type": "object", "properties": { "host_urls": { "type": "array", "items": { "type": "string" } }, "is_default": { "type": "boolean" }, "is_internal": { "type": "boolean" }, "name": { "type": "string" }, "proxy_id": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "secrets": { "type": "object", "properties": { "ssl": { "type": "object", "properties": { "agent_key": { "oneOf": [{ "type": "object", "properties": { "id": { "type": "string" } }, "required": ["id"] }, { "type": "string" }] }, "es_key": { "oneOf": [{ "type": "object", "properties": { "id": { "type": "string" } }, "required": ["id"] }, { "type": "string" }] }, "key": { "oneOf": [{ "type": "object", "properties": { "id": { "type": "string" } }, "required": ["id"] }, { "type": "string" }] } } } } }, "ssl": { "oneOf": [{ "type": "object", "properties": { "agent_certificate": { "type": "string" }, "agent_certificate_authorities": { "type": "array", "items": { "type": "string" } }, "agent_key": { "type": "string" }, "certificate": { "type": "string" }, "certificate_authorities": { "type": "array", "items": { "type": "string" } }, "client_auth": { "enum": ["optional", "required", "none"] }, "es_certificate": { "type": "string" }, "es_certificate_authorities": { "type": "array", "items": { "type": "string" } }, "es_key": { "type": "string" }, "key": { "type": "string" } } }, { "type": "null" }] } } }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-fleet-fleet-server-hosts-itemid" }

package/lib/cjs/kibana/json/put_fleet_outputs_outputid.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "outputId": { "type": "string", "description": "The ID of the output", "x-found-in": "path" } }, "required": ["outputId"], "allOf": [{ "type": "object", "properties": { "allow_edit": { "type": "array", "items": { "type": "string" } }, "ca_sha256": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "ca_trusted_fingerprint": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "config_yaml": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "hosts": { "type": "array", "items": { "type": "string" } }, "id": { "type": "string" }, "is_default": { "type": "boolean" }, "is_default_monitoring": { "type": "boolean" }, "is_internal": { "type": "boolean" }, "is_preconfigured": { "type": "boolean" }, "name": { "type": "string" }, "otel_disable_beatsauth": { "oneOf": [{ "type": "boolean" }, { "type": "null" }] }, "otel_exporter_config_yaml": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "preset": { "enum": ["balanced", "custom", "throughput", "scale", "latency"] }, "proxy_id": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "secrets": { "type": "object", "properties": { "password": { "oneOf": [{ "type": "object", "properties": { "hash": { "type": "string" }, "id": { "type": "string" } }, "required": ["id"] }, { "type": "string" }] }, "ssl": { "type": "object", "properties": { "key": { "oneOf": [{ "type": "object", "properties": { "hash": { "type": "string" }, "id": { "type": "string" } }, "required": ["id"] }, { "type": "string" }] } }, "required": ["key"] } } }, "shipper": { "oneOf": [{ "$ref": "./_defs.json#/$defs/Kibana_HTTP_APIs_output_shipper" }, { "type": "null" }] }, "ssl": { "oneOf": [{ "$ref": "./_defs.json#/$defs/Kibana_HTTP_APIs_output_ssl" }, { "type": "null" }] }, "type": { "enum": ["kafka"] }, "write_to_logs_streams": { "oneOf": [{ "type": "boolean" }, { "type": "null" }] }, "kibana_api_key": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "kibana_url": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "service_token": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "sync_integrations": { "type": "boolean" }, "sync_uninstalled_integrations": { "type": "boolean" }, "auth_type": { "enum": ["none", "user_pass", "ssl", "kerberos"] }, "broker_timeout": { "type": "number" }, "client_id": { "type": "string" }, "compression": { "enum": ["gzip", "snappy", "lz4", "none"] }, "compression_level": { "oneOf": [{ "type": "number" }, { "type": "null" }] }, "connection_type": { "enum": ["plaintext", "encryption"] }, "hash": { "type": "object", "properties": { "hash": { "type": "string" }, "random": { "type": "boolean" } } }, "headers": { "type": "array", "items": { "type": "object", "properties": { "key": { "type": "string" }, "value": { "type": "string" } }, "required": ["key", "value"] } }, "key": { "type": "string" }, "partition": { "enum": ["random", "round_robin", "hash"] }, "password": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "random": { "type": "object", "properties": { "group_events": { "type": "number" } } }, "required_acks": { "enum": [1, 0, -1] }, "round_robin": { "type": "object", "properties": { "group_events": { "type": "number" } } }, "sasl": { "oneOf": [{ "type": "object", "properties": { "mechanism": { "enum": ["PLAIN", "SCRAM-SHA-256", "SCRAM-SHA-512"] } } }, { "type": "null" }] }, "timeout": { "type": "number" }, "topic": { "type": "string" }, "username": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "version": { "type": "string" } } }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-fleet-outputs-outputid" }

package/lib/cjs/kibana/json/put_fleet_package_policies_packagepolicyid.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "packagePolicyId": { "type": "string", "description": "The ID of the package policy", "x-found-in": "path" }, "format": { "type": "string", "description": "Format for the response: simplified or legacy", "x-found-in": "query" } }, "required": ["packagePolicyId"], "allOf": [{ "type": "object", "properties": { "additional_datastreams_permissions": { "oneOf": [{ "type": "array", "items": { "type": "string" } }, { "type": "null" }], "description": "Additional data stream permissions that will be added to the agent policy." }, "cloud_connector_id": { "oneOf": [{ "type": "string" }, { "type": "null" }], "description": "ID of the cloud connector associated with this package policy." }, "cloud_connector_name": { "oneOf": [{ "type": "string" }, { "type": "null" }], "description": "Transient field for cloud connector name during creation." }, "condition": { "oneOf": [{ "type": "string" }, { "type": "null" }], "description": "Agent condition expression to evaluate whether to apply this integration to its inputs." }, "description": { "type": "string", "description": "Policy description." }, "enabled": { "type": "boolean" }, "force": { "type": "boolean", "description": "Force package policy creation even if the package is not verified, or if the agent policy is managed." }, "global_data_tags": { "oneOf": [{ "type": "array", "items": { "type": "object", "properties": { "name": { "type": "string", "description": "The name of the custom field. Cannot contain spaces." }, "value": { "oneOf": [{ "type": "string" }, { "type": "number" }], "description": "The value of the custom field." } }, "required": ["name", "value"] } }, { "type": "null" }] }, "inputs": { "type": "object", "additionalProperties": { "type": "object", "properties": { "condition": { "oneOf": [{ "type": "string" }, { "type": "null" }], "description": "Agent condition expression to evaluate whether to apply this input." }, "deprecated": { "$ref": "./_defs.json#/$defs/Kibana_HTTP_APIs_deprecation_info" }, "enabled": { "type": "boolean", "description": "Enable or disable that input. Defaults to `true` (enabled)." }, "streams": { "type": "object", "additionalProperties": { "type": "object", "properties": { "condition": { "oneOf": [{ "type": "string" }, { "type": "null" }], "description": "Agent condition expression to evaluate whether to apply this stream." }, "deprecated": { "$ref": "./_defs.json#/$defs/Kibana_HTTP_APIs_deprecation_info" }, "enabled": { "type": "boolean", "description": "Enable or disable that stream. Defaults to `true` (enabled)." }, "var_group_selections": { "type": "object", "additionalProperties": { "type": "string" }, "description": "Variable group selections. Maps var_group name to the selected option name within that group." }, "vars": { "type": "object", "additionalProperties": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }, { "type": "array", "items": { "type": "string" } }, { "type": "array", "items": { "type": "number" } }, { "type": "object", "properties": { "id": { "type": "string" }, "isSecretRef": { "type": "boolean" } }, "required": ["id", "isSecretRef"] }, { "type": "null" }] }, "description": "Input/stream level variable. Refer to the integration documentation for more information." } } }, "description": "Input streams. Refer to the integration documentation to know which streams are available." }, "vars": { "type": "object", "additionalProperties": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }, { "type": "array", "items": { "type": "string" } }, { "type": "array", "items": { "type": "number" } }, { "type": "object", "properties": { "id": { "type": "string" }, "isSecretRef": { "type": "boolean" } }, "required": ["id", "isSecretRef"] }, { "type": "null" }] }, "description": "Input/stream level variable. Refer to the integration documentation for more information." } } }, "description": "Package policy inputs. Refer to the integration documentation to know which inputs are available." }, "is_managed": { "type": "boolean" }, "name": { "type": "string", "description": "Unique name for the policy." }, "namespace": { "type": "string", "description": "Policy namespace. When not specified, it inherits the agent policy namespace." }, "output_id": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "overrides": { "oneOf": [{ "type": "object", "properties": { "inputs": { "type": "object", "additionalProperties": {} } } }, { "type": "null" }], "description": "Override settings that are defined in the package policy. The override option should be used only in unusual circumstances and not as a routine procedure." }, "package": { "$ref": "./_defs.json#/$defs/Kibana_HTTP_APIs_package_policy_package" }, "package_agent_version_condition": { "type": "string" }, "policy_id": { "oneOf": [{ "type": "string" }, { "type": "null" }], "description": "Deprecated. Use policy_ids instead." }, "policy_ids": { "type": "array", "items": { "type": "string" }, "description": "IDs of the agent policies that the package policy will be added to." }, "spaceIds": { "type": "array", "items": { "type": "string" } }, "supports_agentless": { "oneOf": [{ "type": "boolean" }, { "type": "null" }], "description": "Indicates whether the package policy belongs to an agentless agent policy. Deprecated in favor of the Fleet agentless policies API." }, "supports_cloud_connector": { "oneOf": [{ "type": "boolean" }, { "type": "null" }], "description": "Indicates whether the package policy supports cloud connectors." }, "var_group_selections": { "type": "object", "additionalProperties": { "type": "string" }, "description": "Variable group selections. Maps var_group name to the selected option name within that group." }, "vars": { "type": "object", "additionalProperties": { "oneOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }, { "type": "array", "items": { "type": "string" } }, { "type": "array", "items": { "type": "number" } }, { "type": "object", "properties": { "id": { "type": "string" }, "isSecretRef": { "type": "boolean" } }, "required": ["id", "isSecretRef"] }, { "type": "null" }] }, "description": "Input/stream level variable. Refer to the integration documentation for more information." }, "version": { "type": "string" }, "create_dataset_templates": { "type": "boolean", "description": "When true, install dedicated index templates for streams with a custom data_stream.dataset. Defaults to true for input packages, false for integration packages." }, "id": { "type": "string", "description": "Policy unique identifier." } } }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-fleet-package-policies-packagepolicyid" }

package/lib/cjs/kibana/json/put_fleet_proxies_itemid.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "itemId": { "type": "string", "description": "The ID of the proxy", "x-found-in": "path" } }, "required": ["itemId"], "allOf": [{ "type": "object", "properties": { "certificate": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "certificate_authorities": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "certificate_key": { "oneOf": [{ "type": "string" }, { "type": "null" }] }, "name": { "type": "string" }, "proxy_headers": { "oneOf": [{ "type": "object", "additionalProperties": { "oneOf": [{ "type": "string" }, { "type": "boolean" }, { "type": "number" }] } }, { "type": "null" }] }, "url": { "type": "string" } } }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-fleet-proxies-itemid" }

package/lib/cjs/kibana/json/put_fleet_settings.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "additional_yaml_config": { "type": "string" }, "delete_unenrolled_agents": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "is_preconfigured": { "type": "boolean" } }, "required": ["enabled", "is_preconfigured"] }, "has_seen_add_data_notice": { "type": "boolean" }, "integration_knowledge_enabled": { "type": "boolean" }, "kibana_ca_sha256": { "type": "string" }, "kibana_urls": { "type": "array", "items": { "type": "string" } }, "prerelease_integrations_enabled": { "type": "boolean" } }, "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-fleet-settings" }

package/lib/cjs/kibana/json/put_fleet_space_settings.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "allowed_namespace_prefixes": { "type": "array", "items": { "type": "string" } } }, "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-fleet-space-settings" }

package/lib/cjs/kibana/json/put_security_entity_store.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "logExtraction": { "type": "object", "properties": { "additionalIndexPatterns": { "type": "array", "items": { "type": "string" } }, "delay": { "type": "string" }, "docsLimit": { "type": "number" }, "excludedIndexPatterns": { "type": "array", "items": { "type": "string" } }, "fieldHistoryLength": { "type": "number" }, "frequency": { "type": "string" }, "lookbackPeriod": { "type": "string" }, "maxLogsPerPage": { "type": "number" }, "maxLogsPerWindow": { "type": "number" }, "maxLogsPerWindowCapBehavior": { "enum": ["defer", "drop"] }, "maxTimeWindowSize": { "type": "string" } } } }, "required": ["logExtraction"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-security-entity-store" }

package/lib/cjs/kibana/json/put_security_entity_store_entities_bulk.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "force": { "type": "string", "description": "When true, allows updating protected fields.", "x-found-in": "query" } }, "allOf": [{ "type": "object", "properties": { "entities": { "type": "array", "items": { "type": "object", "properties": { "doc": { "oneOf": [{ "type": "object", "properties": { "@timestamp": { "type": "string" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "oneOf": [{ "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact"] }, {}] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } } }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } } }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } } }, "labels": { "type": "object", "properties": {}, "additionalProperties": {} }, "tags": { "type": "array", "items": { "type": "string" } }, "user": { "type": "object", "properties": { "domain": { "type": "array", "items": { "type": "string" } }, "email": { "type": "array", "items": { "type": "string" } }, "full_name": { "type": "array", "items": { "type": "string" } }, "hash": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "roles": { "type": "array", "items": { "type": "string" } } } } } }, { "type": "object", "properties": { "@timestamp": { "type": "string" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "oneOf": [{ "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact"] }, {}] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } } }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } } }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } } }, "host": { "type": "object", "properties": { "architecture": { "type": "array", "items": { "type": "string" } }, "domain": { "type": "array", "items": { "type": "string" } }, "hostname": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "ip": { "type": "array", "items": { "type": "string" } }, "mac": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "os": { "type": "object", "properties": { "family": { "type": "string" }, "full": { "type": "string" }, "kernel": { "type": "string" }, "name": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "platform": { "type": "string" }, "type": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "version": { "type": "string" } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "type": { "type": "array", "items": { "type": "string" } } } }, "labels": { "type": "object", "properties": {}, "additionalProperties": {} }, "tags": { "type": "array", "items": { "type": "string" } } } }, { "type": "object", "properties": { "@timestamp": { "type": "string" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "oneOf": [{ "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact"] }, {}] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } } }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } } }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } } }, "labels": { "type": "object", "properties": {}, "additionalProperties": {} }, "service": { "type": "object", "properties": { "address": { "type": "string" }, "environment": { "type": "string" }, "ephemeral_id": { "type": "string" }, "id": { "type": "string" }, "name": { "type": "string" }, "node": { "type": "object", "properties": { "name": { "type": "string" }, "role": { "type": "string" }, "roles": { "type": "array", "items": { "type": "string" } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "state": { "type": "string" }, "type": { "type": "string" }, "version": { "type": "string" } } }, "tags": { "type": "array", "items": { "type": "string" } } } }, { "type": "object", "properties": { "@timestamp": { "type": "string" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "oneOf": [{ "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact"] }, {}] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } } }, "cloud": { "type": "object", "properties": { "account": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "availability_zone": { "type": "string" }, "instance": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "machine": { "type": "object", "properties": { "type": { "type": "string" } } }, "project": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "provider": { "type": "string" }, "region": { "type": "string" }, "service": { "type": "object", "properties": { "name": { "type": "string" } } } } }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } } }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } } }, "labels": { "type": "object", "properties": {}, "additionalProperties": {} }, "orchestrator": { "type": "object", "properties": { "api_version": { "type": "string" }, "cluster": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" }, "url": { "type": "string" }, "version": { "type": "string" } } }, "namespace": { "type": "string" }, "organization": { "type": "string" }, "resource": { "type": "object", "properties": { "annotation": { "type": "string" }, "id": { "type": "string" }, "ip": { "type": "string" }, "label": { "type": "string" }, "name": { "type": "string" }, "parent": { "type": "object", "properties": { "type": { "type": "string" } } }, "type": { "type": "string" } } }, "type": { "type": "string" } } }, "tags": { "type": "array", "items": { "type": "string" } } } }] }, "type": { "enum": ["user", "host", "service", "generic"], "description": "The entity type of this record." } }, "required": ["type"] }, "description": "The entities to update." } }, "required": ["entities"] }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-security-entity-store-entities-bulk" }

package/lib/cjs/kibana/json/put_security_entity_store_entities_entitytype.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "entityType": { "type": "string", "description": "The entity type to update.", "x-found-in": "path" }, "force": { "type": "string", "description": "When true, allows updating protected fields.", "x-found-in": "query" } }, "required": ["entityType"], "allOf": [{ "type": "object", "properties": { "@timestamp": { "type": "string" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "oneOf": [{ "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact"] }, {}] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } } }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } } }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } } }, "labels": { "type": "object", "properties": {}, "additionalProperties": {} }, "tags": { "type": "array", "items": { "type": "string" } }, "user": { "type": "object", "properties": { "domain": { "type": "array", "items": { "type": "string" } }, "email": { "type": "array", "items": { "type": "string" } }, "full_name": { "type": "array", "items": { "type": "string" } }, "hash": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "roles": { "type": "array", "items": { "type": "string" } } } }, "host": { "type": "object", "properties": { "architecture": { "type": "array", "items": { "type": "string" } }, "domain": { "type": "array", "items": { "type": "string" } }, "hostname": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "ip": { "type": "array", "items": { "type": "string" } }, "mac": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "os": { "type": "object", "properties": { "family": { "type": "string" }, "full": { "type": "string" }, "kernel": { "type": "string" }, "name": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "platform": { "type": "string" }, "type": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "version": { "type": "string" } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "type": { "type": "array", "items": { "type": "string" } } } }, "service": { "type": "object", "properties": { "address": { "type": "string" }, "environment": { "type": "string" }, "ephemeral_id": { "type": "string" }, "id": { "type": "string" }, "name": { "type": "string" }, "node": { "type": "object", "properties": { "name": { "type": "string" }, "role": { "type": "string" }, "roles": { "type": "array", "items": { "type": "string" } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "state": { "type": "string" }, "type": { "type": "string" }, "version": { "type": "string" } } }, "cloud": { "type": "object", "properties": { "account": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "availability_zone": { "type": "string" }, "instance": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "machine": { "type": "object", "properties": { "type": { "type": "string" } } }, "project": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "provider": { "type": "string" }, "region": { "type": "string" }, "service": { "type": "object", "properties": { "name": { "type": "string" } } } } }, "orchestrator": { "type": "object", "properties": { "api_version": { "type": "string" }, "cluster": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" }, "url": { "type": "string" }, "version": { "type": "string" } } }, "namespace": { "type": "string" }, "organization": { "type": "string" }, "resource": { "type": "object", "properties": { "annotation": { "type": "string" }, "id": { "type": "string" }, "ip": { "type": "string" }, "label": { "type": "string" }, "name": { "type": "string" }, "parent": { "type": "object", "properties": { "type": { "type": "string" } } }, "type": { "type": "string" } } }, "type": { "type": "string" } } } } }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-security-entity-store-entities-entitytype" }

package/lib/cjs/kibana/json/put_security_entity_store_start.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "entityTypes": { "type": "array", "items": { "enum": ["user", "host", "service", "generic"] }, "description": "Entity types to start. Defaults to all installed types." } }, "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-security-entity-store-start" }

package/lib/cjs/kibana/json/put_security_entity_store_stop.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "entityTypes": { "type": "array", "items": { "enum": ["user", "host", "service", "generic"] }, "description": "Entity types to stop. Defaults to all running types." } }, "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-security-entity-store-stop" }

package/lib/cjs/kibana/json/put_security_role_name.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "name": { "type": "string", "description": "The role name.", "x-found-in": "path" }, "createOnly": { "type": "boolean", "description": "When true, a role is not overwritten if it already exists.", "x-found-in": "query" } }, "required": ["name"], "allOf": [{ "$ref": "./_defs.json#/$defs/Kibana_HTTP_APIs_security_role_put_payload" }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-security-role-name" }

package/lib/cjs/kibana/json/put_spaces_space_id.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "type": "string", "description": "The space identifier. You are unable to change the ID with the update operation.", "x-found-in": "path" } }, "required": ["id"], "allOf": [{ "type": "object", "properties": { "_reserved": { "type": "boolean" }, "color": { "type": "string", "description": "The hexadecimal color code used in the space avatar. By default, the color is automatically generated from the space name." }, "description": { "type": "string", "description": "A description for the space." }, "disabledFeatures": { "type": "array", "items": { "type": "string" } }, "id": { "type": "string", "description": "The space ID that is part of the Kibana URL when inside the space. Space IDs are limited to lowercase alphanumeric, underscore, and hyphen characters (a-z, 0-9, _, and -). You are cannot change the ID with the update operation." }, "imageUrl": { "type": "string", "description": "The data-URL encoded image to display in the space avatar. If specified, initials will not be displayed and the color will be visible as the background color for transparent images. For best results, your image should be 64x64. Images will not be optimized by this API call, so care should be taken when using custom images." }, "initials": { "type": "string", "description": "One or two characters that are shown in the space avatar. By default, the initials are automatically generated from the space name." }, "name": { "type": "string", "description": "The display name for the space. " }, "projectRouting": { "type": "string", "description": "Cross-project search default routing configuration for this space. Controls whether searches are scoped to a single project or span multiple projects in serverless environments." } }, "required": ["id", "name"] }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-spaces-space-id" }

package/lib/cjs/kibana/json/put_streams_name.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "name": { "type": "string", "description": "The name of the stream.", "x-found-in": "path" } }, "required": ["name"], "allOf": [{ "$ref": "./_defs.json#/$defs/Kibana_HTTP_APIs_StreamUpsertRequest" }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-streams-name" }

package/lib/cjs/kibana/json/put_streams_name_ingest.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "name": { "type": "string", "description": "The name of the stream.", "x-found-in": "path" } }, "required": ["name"], "allOf": [{ "type": "object", "properties": { "ingest": { "oneOf": [{ "type": "object", "properties": { "failure_store": { "$ref": "./_defs.json#/$defs/Kibana_HTTP_APIs_FailureStore" }, "lifecycle": { "$ref": "./_defs.json#/$defs/Kibana_HTTP_APIs_IngestStreamLifecycle" }, "processing": { "type": "object", "properties": { "steps": { "type": "array", "items": { "$ref": "./_defs.json#/$defs/Kibana_HTTP_APIs_StreamlangStep" } }, "updated_at": {} }, "required": ["steps"] }, "settings": { "type": "object", "properties": { "index.number_of_replicas": { "type": "object", "properties": { "value": { "type": "number" } }, "required": ["value"] }, "index.number_of_shards": { "type": "object", "properties": { "value": { "type": "number" } }, "required": ["value"] }, "index.refresh_interval": { "type": "object", "properties": { "value": { "oneOf": [{ "type": "string" }, { "enum": [-1] }] } }, "required": ["value"] } } }, "wired": { "type": "object", "properties": { "draft": { "type": "boolean" }, "fields": { "$ref": "./_defs.json#/$defs/Kibana_HTTP_APIs_FieldDefinition" }, "routing": { "type": "array", "items": { "type": "object", "properties": { "destination": { "type": "string", "description": "A non-empty string." }, "draft": { "type": "boolean" }, "status": { "enum": ["enabled", "disabled"] }, "where": { "$ref": "./_defs.json#/$defs/Kibana_HTTP_APIs_Condition" } }, "required": ["destination", "where"] } } }, "required": ["fields", "routing"] } }, "required": ["lifecycle", "processing", "settings", "failure_store", "wired"] }, { "type": "object", "properties": { "classic": { "type": "object", "properties": { "field_overrides": { "$ref": "./_defs.json#/$defs/Kibana_HTTP_APIs_ClassicFieldDefinition" } } }, "failure_store": { "$ref": "./_defs.json#/$defs/Kibana_HTTP_APIs_FailureStore" }, "lifecycle": { "$ref": "./_defs.json#/$defs/Kibana_HTTP_APIs_IngestStreamLifecycle" }, "processing": { "type": "object", "properties": { "steps": { "type": "array", "items": { "$ref": "./_defs.json#/$defs/Kibana_HTTP_APIs_StreamlangStep" } }, "updated_at": {} }, "required": ["steps"] }, "settings": { "type": "object", "properties": { "index.number_of_replicas": { "type": "object", "properties": { "value": { "type": "number" } }, "required": ["value"] }, "index.number_of_shards": { "type": "object", "properties": { "value": { "type": "number" } }, "required": ["value"] }, "index.refresh_interval": { "type": "object", "properties": { "value": { "oneOf": [{ "type": "string" }, { "enum": [-1] }] } }, "required": ["value"] } } } }, "required": ["lifecycle", "processing", "settings", "failure_store", "classic"] }] } }, "required": ["ingest"] }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-streams-name-ingest" }

package/lib/cjs/kibana/json/put_streams_name_queries_queryid.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "name": { "type": "string", "description": "The name of the stream.", "x-found-in": "path" }, "queryId": { "type": "string", "description": "The identifier of the query.", "x-found-in": "path" } }, "required": ["name", "queryId"], "allOf": [{ "type": "object", "properties": { "description": { "type": "string" }, "esql": { "type": "object", "properties": { "query": { "type": "string" } }, "required": ["query"] }, "evidence": { "type": "array", "items": { "type": "string" } }, "severity_score": { "type": "number" }, "title": { "type": "string", "description": "A non-empty string." } }, "required": ["title", "esql"] }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-streams-name-queries-queryid" }

package/lib/cjs/kibana/json/put_streams_name_query.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "name": { "type": "string", "description": "The name of the query stream.", "x-found-in": "path" } }, "required": ["name"], "allOf": [{ "type": "object", "properties": { "field_descriptions": { "type": "object", "additionalProperties": { "type": "string" } }, "query": { "type": "object", "properties": { "esql": { "type": "string" } }, "required": ["esql"] } }, "required": ["query"] }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-streams-name-query" }

package/lib/cjs/kibana/json/put_streams_streamname_attachments_attachmenttype_attachmentid.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "streamName": { "type": "string", "description": "The name of the stream", "x-found-in": "path" }, "attachmentType": { "type": "string", "description": "The type of the attachment", "x-found-in": "path" }, "attachmentId": { "type": "string", "description": "The ID of the attachment", "x-found-in": "path" } }, "required": ["streamName", "attachmentType", "attachmentId"], "allOf": [{ "type": "object" }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-streams-streamname-attachments-attachmenttype-attachmentid" }

package/lib/cjs/kibana/json/put_tags_id.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "type": "string", "description": "The tag ID, as returned by the create or search endpoints.", "x-found-in": "path" } }, "required": ["id"], "allOf": [{ "$ref": "./_defs.json#/$defs/Kibana_HTTP_APIs_kbn-tags-request-attributes" }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-tags-id" }

package/lib/cjs/kibana/json/put_workflows_managed_workflow_id.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "type": "string", "description": "Workflow ID", "x-found-in": "path" } }, "required": ["id"], "allOf": [{ "type": "object", "properties": { "description": { "type": "string" }, "enabled": { "type": "boolean" }, "name": { "type": "string" }, "tags": { "type": "array", "items": { "type": "string" } }, "yaml": { "type": "string" } } }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-workflows-managed-workflow-id" }

package/lib/cjs/kibana/json/put_workflows_workflow_id.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "type": "string", "description": "Workflow ID", "x-found-in": "path" } }, "required": ["id"], "allOf": [{ "type": "object", "properties": { "description": { "type": "string" }, "enabled": { "type": "boolean" }, "name": { "type": "string" }, "tags": { "type": "array", "items": { "type": "string" } }, "yaml": { "type": "string" } } }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-workflows-workflow-id" }

package/lib/cjs/kibana/json/read_conversation.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "type": "string", "description": "The conversation's `id` value, a unique identifier for the conversation.", "x-found-in": "path" } }, "required": ["id"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "ReadConversation" }

package/lib/cjs/kibana/json/read_endpoint_list_item.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "type": "string", "description": "Either `id` or `item_id` must be specified", "x-found-in": "query" }, "item_id": { "type": "string", "description": "Either `id` or `item_id` must be specified", "x-found-in": "query" } }, "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "ReadEndpointListItem" }

package/lib/cjs/kibana/json/read_exception_list.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "type": "string", "description": "Exception list's identifier. Either `id` or `list_id` must be specified.", "x-found-in": "query" }, "list_id": { "type": "string", "description": "Human readable exception list string identifier, e.g. `trusted-linux-processes`. Either `id` or `list_id` must be specified.", "x-found-in": "query" }, "namespace_type": { "type": "string", "description": "When `single`, the list is resolved in the current Kibana space. When `agnostic`, the list is a global", "x-found-in": "query" } }, "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "ReadExceptionList" }

package/lib/cjs/kibana/json/read_exception_list_item.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "type": "string", "description": "Exception list item's identifier. Either `id` or `item_id` must be specified.", "x-found-in": "query" }, "item_id": { "type": "string", "description": "Human readable exception item string identifier, e.g. `trusted-linux-processes`. Either `id` or `item_id` must be specified.", "x-found-in": "query" }, "namespace_type": { "type": "string", "description": "`single` fetches the item in the current space; `agnostic` fetches a global (space-agnostic) item. Must", "x-found-in": "query" } }, "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "ReadExceptionListItem" }

package/lib/cjs/kibana/json/read_exception_list_summary.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "type": "string", "description": "Exception list's identifier generated upon creation.", "x-found-in": "query" }, "list_id": { "type": "string", "description": "Exception list's human readable identifier.", "x-found-in": "query" }, "namespace_type": { "type": "string", "description": "`single` returns summary for a list in the current space; `agnostic` for a space-agnostic list. Must", "x-found-in": "query" }, "filter": { "type": "string", "description": "Search filter clause", "x-found-in": "query" } }, "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "ReadExceptionListSummary" }

package/lib/cjs/kibana/json/read_knowledge_base.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "resource": { "type": "string", "description": "The KnowledgeBase `resource` value.", "x-found-in": "path" } }, "required": ["resource"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "ReadKnowledgeBase" }

package/lib/cjs/kibana/json/read_knowledge_base_entry.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "type": "string", "description": "The unique identifier (`id`) of the Knowledge Base Entry to retrieve.", "x-found-in": "path" } }, "required": ["id"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "ReadKnowledgeBaseEntry" }

package/lib/cjs/kibana/json/read_list.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "type": "string", "description": "Value list identifier (`id`) returned when the list was created.", "x-found-in": "query" } }, "required": ["id"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "ReadList" }

package/lib/cjs/kibana/json/read_list_item.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "type": "string", "description": "Value list item identifier. Required if `list_id` and `value` are not specified.", "x-found-in": "query" }, "list_id": { "type": "string", "description": "Value list item list's `id` identfier. Required if `id` is not specified.", "x-found-in": "query" }, "value": { "type": "string", "description": "The value used to evaluate exceptions. Required if `id` is not specified.", "x-found-in": "query" } }, "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "ReadListItem" }

package/lib/cjs/kibana/json/read_rule.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "type": "string", "description": "The rule's `id` value.", "x-found-in": "query" }, "rule_id": { "type": "string", "description": "The rule's `rule_id` value.", "x-found-in": "query" } }, "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "ReadRule" }

package/lib/cjs/kibana/json/reset_slo_op.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "spaceId": { "type": "string", "description": "The spaceId parameter", "x-found-in": "path" }, "sloId": { "type": "string", "description": "The sloId parameter", "x-found-in": "path" } }, "required": ["spaceId", "sloId"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "resetSloOp" }

package/lib/cjs/kibana/json/resolve_timeline.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "template_timeline_id": { "type": "string", "description": "The ID of the template timeline to resolve", "x-found-in": "query" }, "id": { "type": "string", "description": "The ID of the timeline to resolve", "x-found-in": "query" } }, "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "ResolveTimeline" }

package/lib/cjs/kibana/json/rule_preview.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "enable_logged_requests": { "type": "boolean", "description": "Enables logging and returning in response ES queries, performed during rule execution", "x-found-in": "query" } }, "allOf": [{ "type": "object" }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "RulePreview" }

package/lib/cjs/kibana/json/run_script_action.request.json

@@ -0,0 +1 @@
+{ "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_RunScriptRouteRequestBody", "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "RunScriptAction" }

package/lib/cjs/kibana/json/save_apm_server_schema.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "schema": { "type": "object", "additionalProperties": true, "description": "Schema object" } }, "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "saveApmServerSchema" }

package/lib/cjs/kibana/json/search_alerts.request.json

@@ -0,0 +1 @@
+{ "$ref": "./_defs.json#/$defs/Security_Detections_API_QueryAlertsBodyParams", "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "SearchAlerts" }

package/lib/cjs/kibana/json/search_single_configuration.request.json

@@ -0,0 +1 @@
+{ "$ref": "./_defs.json#/$defs/APM_UI_search_agent_configuration_object", "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "searchSingleConfiguration" }

package/lib/cjs/kibana/json/set_alert_assignees.request.json

@@ -0,0 +1 @@
+{ "$ref": "./_defs.json#/$defs/Security_Detections_API_SetAlertAssigneesBody", "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "SetAlertAssignees" }

package/lib/cjs/kibana/json/set_alert_tags.request.json

@@ -0,0 +1 @@
+{ "$ref": "./_defs.json#/$defs/Security_Detections_API_SetAlertTagsBody", "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "SetAlertTags" }

package/lib/cjs/kibana/json/set_alerts_status.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "reason": { "$ref": "./_defs.json#/$defs/Security_Detections_API_Reason" }, "signal_ids": { "type": "array", "items": { "type": "string" }, "description": "List of alert ids. Use field `_id` on alert document or `kibana.alert.uuid`. Note: signals are a deprecated term for alerts." }, "status": { "$ref": "./_defs.json#/$defs/Security_Detections_API_AlertStatusExceptClosed" }, "conflicts": { "enum": ["abort", "proceed"] }, "query": { "type": "object", "additionalProperties": true } }, "required": ["status"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "SetAlertsStatus" }

package/lib/cjs/kibana/json/set_default_datail_view_default.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "data_view_id": { "oneOf": [{ "type": "string" }, { "type": "null" }], "description": "The data view identifier. NOTE: The API does not validate whether it is a valid identifier. Use `null` to unset the default data view.\n" }, "force": { "type": "boolean", "description": "Update an existing default data view identifier." } }, "required": ["data_view_id"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "setDefaultDatailViewDefault" }

package/lib/cjs/kibana/json/start_entity_engine.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "entityType": { "type": "string", "description": "The entity type of the engine to start.", "x-found-in": "path" } }, "required": ["entityType"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "StartEntityEngine" }

package/lib/cjs/kibana/json/stop_entity_engine.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "entityType": { "type": "string", "description": "The entity type of the engine to stop.", "x-found-in": "path" } }, "required": ["entityType"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "StopEntityEngine" }

package/lib/cjs/kibana/json/swap_data_views_default.request.json

@@ -0,0 +1 @@
+{ "$ref": "./_defs.json#/$defs/Data_views_swap_data_view_request_object", "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "swapDataViewsDefault" }

package/lib/cjs/kibana/json/unassign_watchlist_entities.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "watchlist_id": { "type": "string", "description": "The ID of the watchlist to remove entities from", "x-found-in": "path" } }, "required": ["watchlist_id"], "allOf": [{ "type": "object", "properties": { "euids": { "type": "array", "items": { "type": "string" }, "description": "The EUIDs of the entities to unassign" } }, "required": ["euids"] }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "UnassignWatchlistEntities" }

package/lib/cjs/kibana/json/update_attack_discovery_schedules.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "type": "string", "description": "The unique identifier (UUID) of the Attack Discovery schedule to update. This ID is returned when creating a schedule and can be found in schedule listings.", "x-found-in": "path" } }, "required": ["id"], "allOf": [{ "$ref": "./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiScheduleUpdateProps" }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "UpdateAttackDiscoverySchedules" }

package/lib/cjs/kibana/json/update_conversation.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "type": "string", "description": "The conversation's `id` value.", "x-found-in": "path" } }, "required": ["id"], "allOf": [{ "$ref": "./_defs.json#/$defs/Security_AI_Assistant_API_ConversationUpdateProps" }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "UpdateConversation" }

package/lib/cjs/kibana/json/update_dashboard_redirect.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "type": "string", "description": "The id parameter", "x-found-in": "path" } }, "required": ["id"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "update-dashboard-redirect" }

package/lib/cjs/kibana/json/update_data_view_default.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "viewId": { "type": "string", "description": "The viewId parameter", "x-found-in": "path" } }, "required": ["viewId"], "allOf": [{ "$ref": "./_defs.json#/$defs/Data_views_update_data_view_request_object" }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "updateDataViewDefault" }

package/lib/cjs/kibana/json/update_endpoint_list_item.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "_version": { "type": "string", "description": "The version id, normally returned by the API when the item is retrieved. Use it ensure updates are made against the latest version." }, "comments": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemCommentArray" }, "description": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemDescription" }, "entries": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemEntryArray" }, "id": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemId", "description": "Either `id` or `item_id` must be specified" }, "item_id": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemHumanId", "description": "Either `id` or `item_id` must be specified" }, "meta": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemMeta" }, "name": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemName" }, "os_types": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemOsTypeArray" }, "tags": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemTags" }, "type": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemType" } }, "required": ["type", "name", "description", "entries"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "UpdateEndpointListItem" }

package/lib/cjs/kibana/json/update_exception_list.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "_version": { "type": "string", "description": "The version id, normally returned by the API when the item was retrieved. Use it ensure updates are done against the latest version." }, "description": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_ExceptionListDescription" }, "id": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_ExceptionListId" }, "list_id": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_ExceptionListHumanId" }, "meta": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_ExceptionListMeta" }, "name": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_ExceptionListName" }, "namespace_type": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_ExceptionNamespaceType" }, "os_types": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_ExceptionListOsTypeArray" }, "tags": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_ExceptionListTags" }, "type": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_ExceptionListType" }, "version": { "$ref": "./_defs.json#/$defs/Security_Exceptions_API_ExceptionListVersion" } }, "required": ["name", "description", "type"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "UpdateExceptionList" }

package/lib/cjs/kibana/json/update_fields_metadata_default.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "viewId": { "type": "string", "description": "The viewId parameter", "x-found-in": "path" } }, "required": ["viewId"], "allOf": [{ "type": "object", "properties": { "fields": { "type": "object", "description": "The field object." } }, "required": ["fields"] }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "updateFieldsMetadataDefault" }

package/lib/cjs/kibana/json/update_knowledge_base_entry.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "type": "string", "description": "The unique identifier (`id`) of the Knowledge Base Entry to update.", "x-found-in": "path" } }, "required": ["id"], "allOf": [{ "$ref": "./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseEntryUpdateRouteProps" }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "UpdateKnowledgeBaseEntry" }

package/lib/cjs/kibana/json/update_list.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "_version": { "$ref": "./_defs.json#/$defs/Security_Lists_API_ListVersionId" }, "description": { "$ref": "./_defs.json#/$defs/Security_Lists_API_ListDescription" }, "id": { "$ref": "./_defs.json#/$defs/Security_Lists_API_ListId" }, "meta": { "$ref": "./_defs.json#/$defs/Security_Lists_API_ListMetadata" }, "name": { "$ref": "./_defs.json#/$defs/Security_Lists_API_ListName" }, "version": { "$ref": "./_defs.json#/$defs/Security_Lists_API_ListVersion" } }, "required": ["id", "name", "description"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "UpdateList" }

package/lib/cjs/kibana/json/update_list_item.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "_version": { "$ref": "./_defs.json#/$defs/Security_Lists_API_ListVersionId" }, "id": { "$ref": "./_defs.json#/$defs/Security_Lists_API_ListItemId" }, "meta": { "$ref": "./_defs.json#/$defs/Security_Lists_API_ListItemMetadata" }, "value": { "$ref": "./_defs.json#/$defs/Security_Lists_API_ListItemValue" } }, "required": ["id", "value"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "UpdateListItem" }

package/lib/cjs/kibana/json/update_priv_mon_user.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "type": "string", "description": "The document ID of the monitored user to update", "x-found-in": "path" } }, "required": ["id"], "allOf": [{ "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_MonitoredUserUpdateDoc" }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "UpdatePrivMonUser" }

package/lib/cjs/kibana/json/update_runtime_field_default.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "viewId": { "type": "string", "description": "The viewId parameter", "x-found-in": "path" }, "fieldName": { "type": "string", "description": "The fieldName parameter", "x-found-in": "path" } }, "required": ["viewId", "fieldName"], "allOf": [{ "type": "object", "properties": { "runtimeField": { "type": "object", "description": "The runtime field definition object.\n\nYou can update following fields:\n\n- `type`\n- `script`\n" } }, "required": ["runtimeField"] }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "updateRuntimeFieldDefault" }

package/lib/cjs/kibana/json/update_slo_op.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "spaceId": { "type": "string", "description": "The spaceId parameter", "x-found-in": "path" }, "sloId": { "type": "string", "description": "The sloId parameter", "x-found-in": "path" } }, "required": ["spaceId", "sloId"], "allOf": [{ "$ref": "./_defs.json#/$defs/SLOs_update_slo_request" }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "updateSloOp" }

package/lib/cjs/kibana/json/update_visualization_redirect.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "type": "string", "description": "The id parameter", "x-found-in": "path" } }, "required": ["id"], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "update-visualization-redirect" }

package/lib/cjs/kibana/json/update_watchlist.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "id": { "type": "string", "description": "The ID of the watchlist to update", "x-found-in": "path" } }, "required": ["id"], "allOf": [{ "type": "object", "properties": { "description": { "type": "string", "description": "Description of the watchlist" }, "managed": { "type": "boolean", "description": "Indicates if the watchlist is managed by the system" }, "name": { "type": "string", "description": "Unique name of the watchlist" }, "riskModifier": { "type": "number", "description": "Risk score modifier associated with the watchlist" } }, "required": ["name", "riskModifier"] }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "UpdateWatchlist" }

package/lib/cjs/kibana/json/upsert_entities_bulk.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "force": { "type": "boolean", "description": "When true, allows updating protected fields.", "x-found-in": "query" } }, "allOf": [{ "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_EntitiesContainer" }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "UpsertEntitiesBulk" }

package/lib/cjs/kibana/json/upsert_entity.request.json

@@ -0,0 +1 @@
+{ "type": "object", "properties": { "entityType": { "type": "string", "description": "", "x-found-in": "path" }, "force": { "type": "boolean", "description": "When true, allows updating protected fields.", "x-found-in": "query" } }, "required": ["entityType"], "allOf": [{ "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_Entity" }], "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "UpsertEntity" }

package/lib/cjs/kibana/tools/apis/apply_entity_engine_dataview_indices.d.ts

@@ -0,0 +1,3 @@
+import type { KbApiDefinition } from '../types.ts';
+export declare const apply_entity_engine_dataview_indicesDefinitions: KbApiDefinition[];
+//# sourceMappingURL=apply_entity_engine_dataview_indices.d.ts.map

package/lib/cjs/kibana/tools/apis/apply_entity_engine_dataview_indices.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply_entity_engine_dataview_indices.d.ts","sourceRoot":"","sources":["../../../../../src/kibana/tools/apis/apply_entity_engine_dataview_indices.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD,eAAO,MAAM,+CAA+C,EAAE,eAAe,EAS5E,CAAA"}

package/lib/cjs/kibana/tools/apis/apply_entity_engine_dataview_indices.js

@@ -0,0 +1,18 @@
+"use strict";
+/*
+ * Copyright Elasticsearch B.V. and contributors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.apply_entity_engine_dataview_indicesDefinitions = void 0;
+exports.apply_entity_engine_dataview_indicesDefinitions = [
+    {
+        name: 'apply-entity-engine-dataview-indices',
+        namespace: 'security-entity-analytics-api',
+        description: 'Apply DataView indices to all installed engines',
+        method: 'POST',
+        path: '/api/entity_store/engines/apply_dataview_indices',
+        destructive: true,
+    },
+];
+//# sourceMappingURL=apply_entity_engine_dataview_indices.js.map