@elastic/schemas 0.4.5 → 0.5.1

package/src/kibana/json/read_list_item.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"id":{"type":"string","description":"Value list item identifier. Required if `list_id` and `value` are not specified.","x-found-in":"query"},"list_id":{"type":"string","description":"Value list item list's `id` identfier. Required if `id` is not specified.","x-found-in":"query"},"value":{"type":"string","description":"The value used to evaluate exceptions. Required if `id` is not specified.","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadListItem"}

package/src/kibana/json/read_rule.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"id":{"type":"string","description":"The rule's `id` value.","x-found-in":"query"},"rule_id":{"type":"string","description":"The rule's `rule_id` value.","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadRule"}

package/src/kibana/json/reset_slo_op.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"spaceId":{"type":"string","description":"The spaceId parameter","x-found-in":"path"},"sloId":{"type":"string","description":"The sloId parameter","x-found-in":"path"}},"required":["spaceId","sloId"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"resetSloOp"}

package/src/kibana/json/resolve_timeline.request.json

@@ -0,0 +1 @@
+{"type":"object","properties":{"template_timeline_id":{"type":"string","description":"The ID of the template timeline to resolve","x-found-in":"query"},"id":{"type":"string","description":"The ID of the timeline to resolve","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ResolveTimeline"}

package/src/kibana/json/roles.delete-security-role-name.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"delete-security-role-name","x-api":{"id":"roles.delete-security-role-name","name":"delete-security-role-name","namespace":"roles"},"x-method":"DELETE","x-path":"/api/security/role/{name}","x-destructive":true,"type":"object","properties":{"name":{"type":"string","description":"The role name.","x-found-in":"path"}},"required":["name"]}

package/src/kibana/json/roles.delete-security-role-name.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"delete-security-role-name","x-api":{"id":"roles.delete-security-role-name","name":"delete-security-role-name","namespace":"roles"},"type":"object","properties":{}}

package/src/kibana/json/roles.get-security-role-name.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-security-role-name","x-api":{"id":"roles.get-security-role-name","name":"get-security-role-name","namespace":"roles"},"x-method":"GET","x-path":"/api/security/role/{name}","x-destructive":false,"type":"object","properties":{"name":{"type":"string","description":"The role name.","x-found-in":"path"},"replaceDeprecatedPrivileges":{"type":"boolean","description":"If `true` and the response contains any privileges that are associated with deprecated features, they are omitted in favor of details about the appropriate replacement feature privileges.","x-found-in":"query"}},"required":["name"]}

package/src/kibana/json/roles.get-security-role-name.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-security-role-name","x-api":{"id":"roles.get-security-role-name","name":"get-security-role-name","namespace":"roles"},"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_security_role_response"}

package/src/kibana/json/roles.get-security-role.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-security-role","x-api":{"id":"roles.get-security-role","name":"get-security-role","namespace":"roles"},"x-method":"GET","x-path":"/api/security/role","x-destructive":false,"type":"object","properties":{"replaceDeprecatedPrivileges":{"type":"boolean","description":"If `true` and the response contains any privileges that are associated with deprecated features, they are omitted in favor of details about the appropriate replacement feature privileges.","x-found-in":"query"}}}

package/src/kibana/json/roles.get-security-role.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-security-role","x-api":{"id":"roles.get-security-role","name":"get-security-role","namespace":"roles"},"type":"array","items":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_security_role_response"}}

package/src/kibana/json/roles.post-security-roles.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-security-roles","x-api":{"id":"roles.post-security-roles","name":"post-security-roles","namespace":"roles"},"x-method":"POST","x-path":"/api/security/roles","x-destructive":true,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_security_roles_bulk_create_or_update_payload","x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/roles.post-security-roles.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-security-roles","x-api":{"id":"roles.post-security-roles","name":"post-security-roles","namespace":"roles"},"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_security_bulk_create_or_update_roles_response"}

package/src/kibana/json/roles.put-security-role-name.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-security-role-name","x-api":{"id":"roles.put-security-role-name","name":"put-security-role-name","namespace":"roles"},"x-method":"PUT","x-path":"/api/security/role/{name}","x-destructive":true,"type":"object","properties":{"name":{"type":"string","description":"The role name.","x-found-in":"path"},"createOnly":{"type":"boolean","description":"When true, a role is not overwritten if it already exists.","x-found-in":"query"},"body":{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_security_role_put_payload","x-found-in":"body","x-body-root":true}},"required":["name"]}

package/src/kibana/json/roles.put-security-role-name.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"put-security-role-name","x-api":{"id":"roles.put-security-role-name","name":"put-security-role-name","namespace":"roles"},"type":"object","properties":{}}

package/src/kibana/json/rule_preview.request.json

@@ -1 +1 @@
-{"oneOf":[{"oneOf":[{"type":"object"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_EqlRuleCreateProps"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_RulePreviewParams"}]},{"oneOf":[{"type":"object"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_QueryRuleCreateProps"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_RulePreviewParams"}]},{"oneOf":[{"type":"object"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_SavedQueryRuleCreateProps"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_RulePreviewParams"}]},{"oneOf":[{"type":"object"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_ThresholdRuleCreateProps"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_RulePreviewParams"}]},{"oneOf":[{"type":"object"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_ThreatMatchRuleCreateProps"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_RulePreviewParams"}]},{"oneOf":[{"type":"object"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_MachineLearningRuleCreateProps"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_RulePreviewParams"}]},{"oneOf":[{"type":"object"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_NewTermsRuleCreateProps"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_RulePreviewParams"}]},{"oneOf":[{"type":"object"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_EsqlRuleCreateProps"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_RulePreviewParams"}]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"RulePreview"}
+{"type":"object","properties":{"enable_logged_requests":{"type":"boolean","description":"Enables logging and returning in response ES queries, performed during rule execution","x-found-in":"query"}},"allOf":[{"type":"object"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"RulePreview"}

package/src/kibana/json/saved-objects.post-saved-objects-export.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-saved-objects-export","x-api":{"id":"saved-objects.post-saved-objects-export","name":"post-saved-objects-export","namespace":"saved-objects"},"x-method":"POST","x-path":"/api/saved_objects/_export","x-destructive":true,"x-response-type":"ndjson","type":"object","properties":{"excludeExportDetails":{"type":"boolean","description":"Do not add export details entry at the end of the stream.","x-found-in":"body"},"hasReference":{"oneOf":[{"type":"object","properties":{"id":{"type":"string"},"type":{"type":"string"}},"required":["type","id"]},{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"type":{"type":"string"}},"required":["type","id"]}}],"x-found-in":"body"},"includeReferencesDeep":{"type":"boolean","description":"Includes all of the referenced objects in the exported objects.","x-found-in":"body"},"objects":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"type":{"type":"string"}},"required":["type","id"]},"description":"A list of objects to export. NOTE: this optional parameter cannot be combined with the `types` option","x-found-in":"body"},"search":{"type":"string","description":"Search for documents to export using the Elasticsearch Simple Query String syntax.","x-found-in":"body"},"type":{"oneOf":[{"type":"string"},{"type":"array","items":{"type":"string"}}],"description":"The saved object types to include in the export. Use `*` to export all the types. Valid options depend on enabled plugins, but may include `visualization`, `dashboard`, `search`, `index-pattern`, `tag`, `config`, `config-global`, `lens`, `map`, `event-annotation-group`, `query`, `url`, `action`, `alert`, `alerting_rule_template`, `apm-indices`, `cases-user-actions`, `cases`, `cases-comments`, `infrastructure-monitoring-log-view`, `ml-trained-model`, `osquery-saved-query`, `osquery-pack`, `osquery-pack-asset`.","x-found-in":"body"}}}

package/src/kibana/json/saved-objects.post-saved-objects-export.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-saved-objects-export","x-api":{"id":"saved-objects.post-saved-objects-export","name":"post-saved-objects-export","namespace":"saved-objects"},"type":"object","properties":{}}

package/src/kibana/json/saved-objects.post-saved-objects-import.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-saved-objects-import","x-api":{"id":"saved-objects.post-saved-objects-import","name":"post-saved-objects-import","namespace":"saved-objects"},"x-method":"POST","x-path":"/api/saved_objects/_import","x-destructive":true,"type":"object","properties":{"overwrite":{"type":"boolean","description":"Overwrites saved objects when they already exist. When used, potential conflict errors are automatically resolved by overwriting the destination object. NOTE: This option cannot be used with the `createNewCopies` option.","x-found-in":"query"},"createNewCopies":{"type":"boolean","description":"Creates copies of saved objects, regenerates each object ID, and resets the origin. When used, potential conflict errors are avoided. NOTE: This option cannot be used with the `overwrite` and `compatibilityMode` options.","x-found-in":"query"},"compatibilityMode":{"type":"boolean","description":"Applies various adjustments to the saved objects that are being imported to maintain compatibility between different Kibana versions. Use this option only if you encounter issues with imported saved objects. NOTE: This option cannot be used with the `createNewCopies` option.","x-found-in":"query"}}}

package/src/kibana/json/saved-objects.post-saved-objects-import.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-saved-objects-import","x-api":{"id":"saved-objects.post-saved-objects-import","name":"post-saved-objects-import","namespace":"saved-objects"},"type":"object","properties":{"errors":{"type":"array","items":{"type":"object","properties":{},"additionalProperties":true},"description":"Indicates the import was unsuccessful and specifies the objects that failed to import.\n\nNOTE: One object may result in multiple errors, which requires separate steps to resolve. For instance, a `missing_references` error and conflict error."},"success":{"type":"boolean","description":"Indicates when the import was successfully completed. When set to false, some objects may not have been created. For additional information, refer to the `errors` and `successResults` properties."},"successCount":{"type":"number","description":"Indicates the number of successfully imported records."},"successResults":{"type":"array","items":{"type":"object","properties":{},"additionalProperties":true},"description":"Indicates the objects that are successfully imported, with any metadata if applicable.\n\nNOTE: Objects are created only when all resolvable errors are addressed, including conflicts and missing references. If objects are created as new copies, each entry in the `successResults` array includes a `destinationId` attribute."}},"required":["success","successCount","errors","successResults"]}

package/src/kibana/json/saved-objects.post-saved-objects-resolve-import-errors.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-saved-objects-resolve-import-errors","x-api":{"id":"saved-objects.post-saved-objects-resolve-import-errors","name":"post-saved-objects-resolve-import-errors","namespace":"saved-objects"},"x-method":"POST","x-path":"/api/saved_objects/_resolve_import_errors","x-destructive":true,"type":"object","properties":{"createNewCopies":{"type":"boolean","description":"Creates copies of saved objects, regenerates each object ID, and resets the origin.","x-found-in":"query"},"compatibilityMode":{"type":"boolean","description":"Applies adjustments to maintain compatibility between different Kibana versions.","x-found-in":"query"}}}

package/src/kibana/json/saved-objects.post-saved-objects-resolve-import-errors.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-saved-objects-resolve-import-errors","x-api":{"id":"saved-objects.post-saved-objects-resolve-import-errors","name":"post-saved-objects-resolve-import-errors","namespace":"saved-objects"},"type":"object","properties":{}}

package/src/kibana/json/security-ai-assistant-api.chat-complete.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ChatComplete","x-api":{"id":"security-ai-assistant-api.chat-complete","name":"chat-complete","namespace":"security-ai-assistant-api"},"x-method":"POST","x-path":"/api/security_ai_assistant/chat/complete","x-destructive":false,"type":"object","properties":{"content_references_disabled":{"type":"boolean","description":"If true, the response will not include content references.","x-found-in":"query"},"body":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_ChatCompleteProps","x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/security-ai-assistant-api.chat-complete.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ChatComplete","x-api":{"id":"security-ai-assistant-api.chat-complete","name":"chat-complete","namespace":"security-ai-assistant-api"},"type":"object","properties":{}}

package/src/kibana/json/security-ai-assistant-api.create-conversation.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"CreateConversation","x-api":{"id":"security-ai-assistant-api.create-conversation","name":"create-conversation","namespace":"security-ai-assistant-api"},"x-method":"POST","x-path":"/api/security_ai_assistant/current_user/conversations","x-destructive":false,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_ConversationCreateProps","x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/security-ai-assistant-api.create-conversation.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"CreateConversation","x-api":{"id":"security-ai-assistant-api.create-conversation","name":"create-conversation","namespace":"security-ai-assistant-api"},"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_ConversationResponse"}

package/src/kibana/json/security-ai-assistant-api.create-knowledge-base-entry.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"CreateKnowledgeBaseEntry","x-api":{"id":"security-ai-assistant-api.create-knowledge-base-entry","name":"create-knowledge-base-entry","namespace":"security-ai-assistant-api"},"x-method":"POST","x-path":"/api/security_ai_assistant/knowledge_base/entries","x-destructive":false,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseEntryCreateProps","x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/security-ai-assistant-api.create-knowledge-base-entry.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"CreateKnowledgeBaseEntry","x-api":{"id":"security-ai-assistant-api.create-knowledge-base-entry","name":"create-knowledge-base-entry","namespace":"security-ai-assistant-api"},"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseEntryResponse"}

package/src/kibana/json/security-ai-assistant-api.create-knowledge-base.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"CreateKnowledgeBase","x-api":{"id":"security-ai-assistant-api.create-knowledge-base","name":"create-knowledge-base","namespace":"security-ai-assistant-api"},"x-method":"POST","x-path":"/api/security_ai_assistant/knowledge_base/{resource}","x-destructive":false,"type":"object","properties":{"resource":{"type":"string","description":"The KnowledgeBase `resource` value.","x-found-in":"path"},"modelId":{"type":"string","description":"ELSER modelId to use when setting up the Knowledge Base. If not provided, a default model will be used.","x-found-in":"query"},"ignoreSecurityLabs":{"type":"boolean","description":"Indicates whether we should or should not install Security Labs docs when setting up the Knowledge Base. Defaults to `false`.","x-found-in":"query"}},"required":["resource"]}

package/src/kibana/json/security-ai-assistant-api.create-knowledge-base.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"CreateKnowledgeBase","x-api":{"id":"security-ai-assistant-api.create-knowledge-base","name":"create-knowledge-base","namespace":"security-ai-assistant-api"},"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseResponse"}

package/src/kibana/json/security-ai-assistant-api.delete-all-conversations.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"DeleteAllConversations","x-api":{"id":"security-ai-assistant-api.delete-all-conversations","name":"delete-all-conversations","namespace":"security-ai-assistant-api"},"x-method":"DELETE","x-path":"/api/security_ai_assistant/current_user/conversations","x-destructive":true,"type":"object","properties":{"excludedIds":{"type":"array","items":{"type":"string"},"description":"Optional list of conversation IDs to delete.","x-found-in":"body"}}}

package/src/kibana/json/security-ai-assistant-api.delete-all-conversations.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"DeleteAllConversations","x-api":{"id":"security-ai-assistant-api.delete-all-conversations","name":"delete-all-conversations","namespace":"security-ai-assistant-api"},"type":"object","properties":{"failures":{"type":"array","items":{"type":"string"}},"success":{"type":"boolean"},"totalDeleted":{"type":"number"}}}

package/src/kibana/json/security-ai-assistant-api.delete-conversation.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"DeleteConversation","x-api":{"id":"security-ai-assistant-api.delete-conversation","name":"delete-conversation","namespace":"security-ai-assistant-api"},"x-method":"DELETE","x-path":"/api/security_ai_assistant/current_user/conversations/{id}","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The conversation's `id` value.","x-found-in":"path"}},"required":["id"]}

package/src/kibana/json/security-ai-assistant-api.delete-conversation.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"DeleteConversation","x-api":{"id":"security-ai-assistant-api.delete-conversation","name":"delete-conversation","namespace":"security-ai-assistant-api"},"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_ConversationResponse"}

package/src/kibana/json/security-ai-assistant-api.delete-knowledge-base-entry.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"DeleteKnowledgeBaseEntry","x-api":{"id":"security-ai-assistant-api.delete-knowledge-base-entry","name":"delete-knowledge-base-entry","namespace":"security-ai-assistant-api"},"x-method":"DELETE","x-path":"/api/security_ai_assistant/knowledge_base/entries/{id}","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (`id`) of the Knowledge Base Entry to delete.","x-found-in":"path"}},"required":["id"]}

package/src/kibana/json/security-ai-assistant-api.delete-knowledge-base-entry.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"DeleteKnowledgeBaseEntry","x-api":{"id":"security-ai-assistant-api.delete-knowledge-base-entry","name":"delete-knowledge-base-entry","namespace":"security-ai-assistant-api"},"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_DeleteResponseFields"}

package/src/kibana/json/security-ai-assistant-api.find-anonymization-fields.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"FindAnonymizationFields","x-api":{"id":"security-ai-assistant-api.find-anonymization-fields","name":"find-anonymization-fields","namespace":"security-ai-assistant-api"},"x-method":"GET","x-path":"/api/security_ai_assistant/anonymization_fields/_find","x-destructive":false,"type":"object","properties":{"fields":{"type":"array","items":{"type":"string"},"description":"Fields to return","x-found-in":"query"},"filter":{"type":"string","description":"Search query","x-found-in":"query"},"sort_field":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_FindAnonymizationFieldsSortField","description":"Field to sort by","x-found-in":"query"},"sort_order":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_SortOrder","description":"Sort order","x-found-in":"query"},"page":{"type":"number","description":"Page number","x-found-in":"query"},"per_page":{"type":"number","description":"AnonymizationFields per page","x-found-in":"query"},"all_data":{"type":"boolean","description":"If true, additionally fetch all anonymization fields, otherwise fetch only the provided page","x-found-in":"query"}}}

package/src/kibana/json/security-ai-assistant-api.find-anonymization-fields.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"FindAnonymizationFields","x-api":{"id":"security-ai-assistant-api.find-anonymization-fields","name":"find-anonymization-fields","namespace":"security-ai-assistant-api"},"type":"object","properties":{"aggregations":{"type":"object","properties":{"field_status":{"type":"object","properties":{"buckets":{"type":"object","properties":{"allowed":{"type":"object","properties":{"doc_count":{"type":"number"}}},"anonymized":{"type":"object","properties":{"doc_count":{"type":"number"}}},"denied":{"type":"object","properties":{"doc_count":{"type":"number"}}}}}}}}},"all":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_AnonymizationFieldResponse"}},"data":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_AnonymizationFieldResponse"}},"page":{"type":"number"},"perPage":{"type":"number"},"total":{"type":"number"}},"required":["page","perPage","total","data"]}

package/src/kibana/json/security-ai-assistant-api.find-conversations.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"FindConversations","x-api":{"id":"security-ai-assistant-api.find-conversations","name":"find-conversations","namespace":"security-ai-assistant-api"},"x-method":"GET","x-path":"/api/security_ai_assistant/current_user/conversations/_find","x-destructive":false,"type":"object","properties":{"fields":{"type":"array","items":{"type":"string"},"description":"A list of fields to include in the response. If omitted, all fields are returned.","x-found-in":"query"},"filter":{"type":"string","description":"A search query to filter the conversations. Can match against titles, messages, or other conversation attributes.","x-found-in":"query"},"sort_field":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_FindConversationsSortField","description":"The field by which to sort the results. Valid fields are `created_at`, `title`, and `updated_at`.","x-found-in":"query"},"sort_order":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_SortOrder","description":"The order in which to sort the results. Can be either `asc` for ascending or `desc` for descending.","x-found-in":"query"},"page":{"type":"number","description":"The page number of the results to retrieve. Default is 1.","x-found-in":"query"},"per_page":{"type":"number","description":"The number of conversations to return per page. Default is 20.","x-found-in":"query"},"is_owner":{"type":"boolean","description":"Whether to return conversations that the current user owns. If true, only conversations owned by the user are returned.","x-found-in":"query"}}}

package/src/kibana/json/security-ai-assistant-api.find-conversations.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"FindConversations","x-api":{"id":"security-ai-assistant-api.find-conversations","name":"find-conversations","namespace":"security-ai-assistant-api"},"type":"object","properties":{"data":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_ConversationResponse"},"description":"A list of conversations."},"page":{"type":"number","description":"The current page of the results."},"perPage":{"type":"number","description":"The number of results returned per page."},"total":{"type":"number","description":"The total number of conversations matching the filter criteria."}},"required":["page","perPage","total","data"]}

package/src/kibana/json/security-ai-assistant-api.find-knowledge-base-entries.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"FindKnowledgeBaseEntries","x-api":{"id":"security-ai-assistant-api.find-knowledge-base-entries","name":"find-knowledge-base-entries","namespace":"security-ai-assistant-api"},"x-method":"GET","x-path":"/api/security_ai_assistant/knowledge_base/entries/_find","x-destructive":false,"type":"object","properties":{"fields":{"type":"array","items":{"type":"string"},"description":"A list of fields to include in the response. If not provided, all fields will be included.","x-found-in":"query"},"filter":{"type":"string","description":"Search query to filter Knowledge Base Entries by specific criteria.","x-found-in":"query"},"sort_field":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_FindKnowledgeBaseEntriesSortField","description":"Field to sort the Knowledge Base Entries by.","x-found-in":"query"},"sort_order":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_SortOrder","description":"Sort order for the results, either asc or desc.","x-found-in":"query"},"page":{"type":"number","description":"Page number for paginated results. Defaults to 1.","x-found-in":"query"},"per_page":{"type":"number","description":"Number of Knowledge Base Entries to return per page. Defaults to 20.","x-found-in":"query"}}}

package/src/kibana/json/security-ai-assistant-api.find-knowledge-base-entries.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"FindKnowledgeBaseEntries","x-api":{"id":"security-ai-assistant-api.find-knowledge-base-entries","name":"find-knowledge-base-entries","namespace":"security-ai-assistant-api"},"type":"object","properties":{"data":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseEntryResponse"},"description":"The list of Knowledge Base Entries for the current page."},"page":{"type":"number","description":"The current page number."},"perPage":{"type":"number","description":"The number of Knowledge Base Entries returned per page."},"total":{"type":"number","description":"The total number of Knowledge Base Entries available."}},"required":["page","perPage","total","data"]}

package/src/kibana/json/security-ai-assistant-api.find-prompts.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"FindPrompts","x-api":{"id":"security-ai-assistant-api.find-prompts","name":"find-prompts","namespace":"security-ai-assistant-api"},"x-method":"GET","x-path":"/api/security_ai_assistant/prompts/_find","x-destructive":false,"type":"object","properties":{"fields":{"type":"array","items":{"type":"string"},"description":"List of specific fields to include in each returned prompt.","x-found-in":"query"},"filter":{"type":"string","description":"Search query string to filter prompts by matching fields.","x-found-in":"query"},"sort_field":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_FindPromptsSortField","description":"Field to sort prompts by.","x-found-in":"query"},"sort_order":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_SortOrder","description":"Sort order, either asc or desc.","x-found-in":"query"},"page":{"type":"number","description":"Page number for pagination.","x-found-in":"query"},"per_page":{"type":"number","description":"Number of prompts per page.","x-found-in":"query"}}}

package/src/kibana/json/security-ai-assistant-api.find-prompts.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"FindPrompts","x-api":{"id":"security-ai-assistant-api.find-prompts","name":"find-prompts","namespace":"security-ai-assistant-api"},"type":"object","properties":{"data":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_PromptResponse"},"description":"The list of prompts returned based on the search query, sorting, and pagination."},"page":{"type":"number","description":"Current page number."},"perPage":{"type":"number","description":"Number of prompts per page."},"total":{"type":"number","description":"Total number of prompts matching the query."}},"required":["page","perPage","total","data"]}

package/src/kibana/json/security-ai-assistant-api.get-knowledge-base.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"GetKnowledgeBase","x-api":{"id":"security-ai-assistant-api.get-knowledge-base","name":"get-knowledge-base","namespace":"security-ai-assistant-api"},"x-method":"GET","x-path":"/api/security_ai_assistant/knowledge_base","x-destructive":false,"type":"object","properties":{}}

package/src/kibana/json/security-ai-assistant-api.get-knowledge-base.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"GetKnowledgeBase","x-api":{"id":"security-ai-assistant-api.get-knowledge-base","name":"get-knowledge-base","namespace":"security-ai-assistant-api"},"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseReadResponse200"}

package/src/kibana/json/security-ai-assistant-api.perform-anonymization-fields-bulk-action.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PerformAnonymizationFieldsBulkAction","x-api":{"id":"security-ai-assistant-api.perform-anonymization-fields-bulk-action","name":"perform-anonymization-fields-bulk-action","namespace":"security-ai-assistant-api"},"x-method":"POST","x-path":"/api/security_ai_assistant/anonymization_fields/_bulk_action","x-destructive":true,"type":"object","properties":{"create":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_AnonymizationFieldCreateProps"},"description":"Array of anonymization fields to create.","x-found-in":"body"},"delete":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"},"description":"Array of IDs to apply the action to."},"query":{"type":"string","description":"Query to filter the bulk action."}},"description":"Object containing the query to filter anonymization fields and/or an array of anonymization field IDs to delete.","x-found-in":"body"},"update":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_AnonymizationFieldUpdateProps"},"description":"Array of anonymization fields to update.","x-found-in":"body"}}}

package/src/kibana/json/security-ai-assistant-api.perform-anonymization-fields-bulk-action.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PerformAnonymizationFieldsBulkAction","x-api":{"id":"security-ai-assistant-api.perform-anonymization-fields-bulk-action","name":"perform-anonymization-fields-bulk-action","namespace":"security-ai-assistant-api"},"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_AnonymizationFieldsBulkCrudActionResponse"}

package/src/kibana/json/security-ai-assistant-api.perform-knowledge-base-entry-bulk-action.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PerformKnowledgeBaseEntryBulkAction","x-api":{"id":"security-ai-assistant-api.perform-knowledge-base-entry-bulk-action","name":"perform-knowledge-base-entry-bulk-action","namespace":"security-ai-assistant-api"},"x-method":"POST","x-path":"/api/security_ai_assistant/knowledge_base/entries/_bulk_action","x-destructive":true,"type":"object","properties":{"create":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseEntryCreateProps"},"description":"List of Knowledge Base Entries to create.","x-found-in":"body"},"delete":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"},"description":"Array of Knowledge Base Entry IDs."},"query":{"type":"string","description":"Query to filter Knowledge Base Entries."}},"x-found-in":"body"},"update":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseEntryUpdateProps"},"description":"List of Knowledge Base Entries to update.","x-found-in":"body"}}}

package/src/kibana/json/security-ai-assistant-api.perform-knowledge-base-entry-bulk-action.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PerformKnowledgeBaseEntryBulkAction","x-api":{"id":"security-ai-assistant-api.perform-knowledge-base-entry-bulk-action","name":"perform-knowledge-base-entry-bulk-action","namespace":"security-ai-assistant-api"},"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseEntryBulkCrudActionResponse"}

package/src/kibana/json/security-ai-assistant-api.perform-prompts-bulk-action.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PerformPromptsBulkAction","x-api":{"id":"security-ai-assistant-api.perform-prompts-bulk-action","name":"perform-prompts-bulk-action","namespace":"security-ai-assistant-api"},"x-method":"POST","x-path":"/api/security_ai_assistant/prompts/_bulk_action","x-destructive":true,"type":"object","properties":{"create":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_PromptCreateProps"},"description":"List of prompts to be created.","x-found-in":"body"},"delete":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"},"description":"Array of IDs to apply the action to."},"query":{"type":"string","description":"Query to filter the bulk action."}},"description":"Criteria for deleting prompts in bulk.","x-found-in":"body"},"update":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_PromptUpdateProps"},"description":"List of prompts to be updated.","x-found-in":"body"}}}

package/src/kibana/json/security-ai-assistant-api.perform-prompts-bulk-action.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PerformPromptsBulkAction","x-api":{"id":"security-ai-assistant-api.perform-prompts-bulk-action","name":"perform-prompts-bulk-action","namespace":"security-ai-assistant-api"},"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_PromptsBulkCrudActionResponse"}

package/src/kibana/json/security-ai-assistant-api.post-knowledge-base.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PostKnowledgeBase","x-api":{"id":"security-ai-assistant-api.post-knowledge-base","name":"post-knowledge-base","namespace":"security-ai-assistant-api"},"x-method":"POST","x-path":"/api/security_ai_assistant/knowledge_base","x-destructive":false,"type":"object","properties":{"modelId":{"type":"string","description":"ELSER modelId to use when setting up the Knowledge Base. If not provided, a default model will be used.","x-found-in":"query"},"ignoreSecurityLabs":{"type":"boolean","description":"Indicates whether we should or should not install Security Labs docs when setting up the Knowledge Base. Defaults to `false`.","x-found-in":"query"}}}

package/src/kibana/json/security-ai-assistant-api.post-knowledge-base.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PostKnowledgeBase","x-api":{"id":"security-ai-assistant-api.post-knowledge-base","name":"post-knowledge-base","namespace":"security-ai-assistant-api"},"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseResponse"}

package/src/kibana/json/security-ai-assistant-api.read-conversation.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadConversation","x-api":{"id":"security-ai-assistant-api.read-conversation","name":"read-conversation","namespace":"security-ai-assistant-api"},"x-method":"GET","x-path":"/api/security_ai_assistant/current_user/conversations/{id}","x-destructive":false,"type":"object","properties":{"id":{"type":"string","description":"The conversation's `id` value, a unique identifier for the conversation.","x-found-in":"path"}},"required":["id"]}

package/src/kibana/json/security-ai-assistant-api.read-conversation.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadConversation","x-api":{"id":"security-ai-assistant-api.read-conversation","name":"read-conversation","namespace":"security-ai-assistant-api"},"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_ConversationResponse"}

package/src/kibana/json/security-ai-assistant-api.read-knowledge-base-entry.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadKnowledgeBaseEntry","x-api":{"id":"security-ai-assistant-api.read-knowledge-base-entry","name":"read-knowledge-base-entry","namespace":"security-ai-assistant-api"},"x-method":"GET","x-path":"/api/security_ai_assistant/knowledge_base/entries/{id}","x-destructive":false,"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (`id`) of the Knowledge Base Entry to retrieve.","x-found-in":"path"}},"required":["id"]}

package/src/kibana/json/security-ai-assistant-api.read-knowledge-base-entry.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadKnowledgeBaseEntry","x-api":{"id":"security-ai-assistant-api.read-knowledge-base-entry","name":"read-knowledge-base-entry","namespace":"security-ai-assistant-api"},"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseEntryResponse"}

package/src/kibana/json/security-ai-assistant-api.read-knowledge-base.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadKnowledgeBase","x-api":{"id":"security-ai-assistant-api.read-knowledge-base","name":"read-knowledge-base","namespace":"security-ai-assistant-api"},"x-method":"GET","x-path":"/api/security_ai_assistant/knowledge_base/{resource}","x-destructive":false,"type":"object","properties":{"resource":{"type":"string","description":"The KnowledgeBase `resource` value.","x-found-in":"path"}},"required":["resource"]}

package/src/kibana/json/security-ai-assistant-api.read-knowledge-base.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadKnowledgeBase","x-api":{"id":"security-ai-assistant-api.read-knowledge-base","name":"read-knowledge-base","namespace":"security-ai-assistant-api"},"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseReadResponse200"}

package/src/kibana/json/security-ai-assistant-api.update-conversation.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateConversation","x-api":{"id":"security-ai-assistant-api.update-conversation","name":"update-conversation","namespace":"security-ai-assistant-api"},"x-method":"PUT","x-path":"/api/security_ai_assistant/current_user/conversations/{id}","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The conversation's `id` value.","x-found-in":"path"},"body":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_ConversationUpdateProps","x-found-in":"body","x-body-root":true}},"required":["id"]}

package/src/kibana/json/security-ai-assistant-api.update-conversation.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateConversation","x-api":{"id":"security-ai-assistant-api.update-conversation","name":"update-conversation","namespace":"security-ai-assistant-api"},"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_ConversationResponse"}

package/src/kibana/json/security-ai-assistant-api.update-knowledge-base-entry.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateKnowledgeBaseEntry","x-api":{"id":"security-ai-assistant-api.update-knowledge-base-entry","name":"update-knowledge-base-entry","namespace":"security-ai-assistant-api"},"x-method":"PUT","x-path":"/api/security_ai_assistant/knowledge_base/entries/{id}","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (`id`) of the Knowledge Base Entry to update.","x-found-in":"path"},"body":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseEntryUpdateRouteProps","x-found-in":"body","x-body-root":true}},"required":["id"]}

package/src/kibana/json/security-ai-assistant-api.update-knowledge-base-entry.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateKnowledgeBaseEntry","x-api":{"id":"security-ai-assistant-api.update-knowledge-base-entry","name":"update-knowledge-base-entry","namespace":"security-ai-assistant-api"},"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseEntryResponse"}

package/src/kibana/json/security-attack-discovery-api.attack-discovery-find.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"AttackDiscoveryFind","x-api":{"id":"security-attack-discovery-api.attack-discovery-find","name":"attack-discovery-find","namespace":"security-attack-discovery-api"},"x-method":"GET","x-path":"/api/attack_discovery/_find","x-destructive":false,"type":"object","properties":{"alert_ids":{"type":"array","items":{"type":"string"},"description":"Filter results to Attack discoveries that include any of the provided alert IDs","x-found-in":"query"},"connector_names":{"type":"array","items":{"type":"string"},"description":"Filter results to Attack discoveries created by any of the provided human readable connector names. Note that values must match the human readable `connector_name` property of an Attack discovery, e.g. \"GPT-5 Chat\", which are distinct from `connector_id` values used to generate Attack discoveries.","x-found-in":"query"},"enable_field_rendering":{"type":"boolean","description":"Enables a markdown syntax used to render pivot fields, for example `{{ user.name james }}`. When disabled, the same example would be rendered as `james`. This is primarily used for Attack Discovery views within Kibana. Defaults to `false`.","x-found-in":"query"},"end":{"type":"string","description":"End of the time range for the search. Accepts absolute timestamps (ISO 8601) or relative date math (e.g. \"now\", \"now-24h\").","x-found-in":"query"},"ids":{"type":"array","items":{"type":"string"},"description":"Filter results to the Attack discoveries with the specified IDs","x-found-in":"query"},"include_unique_alert_ids":{"type":"boolean","description":"If `true`, the response will include `unique_alert_ids` and `unique_alert_ids_count` aggregated across the matched Attack discoveries","x-found-in":"query"},"page":{"type":"number","description":"Page number to return (used for pagination). Defaults to 1.","x-found-in":"query"},"per_page":{"type":"number","description":"Number of Attack discoveries to return per page (used for pagination). Defaults to 10.","x-found-in":"query"},"search":{"type":"string","description":"Free-text search query applied to relevant text fields of Attack discoveries (title, description, tags, etc.)","x-found-in":"query"},"shared":{"type":"boolean","description":"Whether to filter by shared visibility. If omitted, both shared and privately visible Attack discoveries are returned. Use `true` to return only shared discoveries, `false` to return only those visible to the current user. Mutually exclusive with `include_all_authors`.","x-found-in":"query"},"include_all_authors":{"type":"boolean","description":"If `true`, the response will include all attack discoveries matching other criteria regardless of who created them. Mutually exclusive with `shared`.","x-found-in":"query"},"scheduled":{"type":"boolean","description":"Whether to filter by scheduled or ad-hoc attack discoveries. If omitted, both types of attack discoveries are returned. Use `true` to return only scheduled discoveries or `false` to return only ad-hoc discoveries.","x-found-in":"query"},"sort_field":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryFindSortField","description":"Field used to sort results. See `AttackDiscoveryFindSortField` for allowed values.","x-found-in":"query"},"sort_order":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_SortOrder","description":"Sort order direction `asc` for ascending or `desc` for descending. Defaults to `desc`.","x-found-in":"query"},"start":{"type":"string","description":"Start of the time range for the search. Accepts absolute timestamps (ISO 8601) or relative date math (e.g. \"now-7d\").","x-found-in":"query"},"status":{"type":"array","items":{"enum":["acknowledged","closed","open"]},"description":"Filter by alert workflow status. Provide one or more of the allowed workflow states.","x-found-in":"query"},"with_replacements":{"type":"boolean","description":"When true, return the created Attack discoveries with text replacements applied to the detailsMarkdown, entitySummaryMarkdown, summaryMarkdown, and title fields. Defaults to `true`.","x-found-in":"query"}}}

package/src/kibana/json/security-attack-discovery-api.attack-discovery-find.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"AttackDiscoveryFind","x-api":{"id":"security-attack-discovery-api.attack-discovery-find","name":"attack-discovery-find","namespace":"security-attack-discovery-api"},"type":"object","properties":{"connector_names":{"type":"array","items":{"type":"string"},"description":"List of human readable connector names that are present in the matched Attack discoveries. Useful for building client filters or summaries."},"data":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiAlert"},"description":"Array of matched Attack discovery objects. Each item follows the `AttackDiscoveryApiAlert` schema."},"page":{"type":"number","description":"Current page number of the paginated result set."},"per_page":{"type":"number","description":"Number of items requested per page."},"total":{"type":"number","description":"Total number of Attack discoveries matching the query (across all pages)."},"unique_alert_ids":{"type":"array","items":{"type":"string"},"description":"List of unique alert IDs aggregated from the matched Attack discoveries. Only present if `include_unique_alert_ids=true` in the request."},"unique_alert_ids_count":{"type":"number","description":"Number of unique alert IDs across all matched Attack discoveries. Only present if `include_unique_alert_ids=true` in the request."}},"required":["connector_names","data","page","per_page","total","unique_alert_ids_count"]}

package/src/kibana/json/security-attack-discovery-api.bulk-delete-attack-discovery-schedules.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"BulkDeleteAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.bulk-delete-attack-discovery-schedules","name":"bulk-delete-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/schedules/_bulk_delete","x-destructive":true,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_BulkActionAttackDiscoverySchedulesRequestBody","x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/security-attack-discovery-api.bulk-delete-attack-discovery-schedules.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"BulkDeleteAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.bulk-delete-attack-discovery-schedules","name":"bulk-delete-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_BulkActionAttackDiscoverySchedulesResponse"}

package/src/kibana/json/security-attack-discovery-api.bulk-disable-attack-discovery-schedules.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"BulkDisableAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.bulk-disable-attack-discovery-schedules","name":"bulk-disable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/schedules/_bulk_disable","x-destructive":true,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_BulkActionAttackDiscoverySchedulesRequestBody","x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/security-attack-discovery-api.bulk-disable-attack-discovery-schedules.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"BulkDisableAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.bulk-disable-attack-discovery-schedules","name":"bulk-disable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_BulkActionAttackDiscoverySchedulesResponse"}

package/src/kibana/json/security-attack-discovery-api.bulk-enable-attack-discovery-schedules.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"BulkEnableAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.bulk-enable-attack-discovery-schedules","name":"bulk-enable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/schedules/_bulk_enable","x-destructive":true,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_BulkActionAttackDiscoverySchedulesRequestBody","x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/security-attack-discovery-api.bulk-enable-attack-discovery-schedules.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"BulkEnableAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.bulk-enable-attack-discovery-schedules","name":"bulk-enable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_BulkActionAttackDiscoverySchedulesResponse"}

package/src/kibana/json/security-attack-discovery-api.create-attack-discovery-schedules.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"CreateAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.create-attack-discovery-schedules","name":"create-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/schedules","x-destructive":false,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiScheduleCreateProps","x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/security-attack-discovery-api.create-attack-discovery-schedules.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"CreateAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.create-attack-discovery-schedules","name":"create-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiSchedule"}

package/src/kibana/json/security-attack-discovery-api.delete-attack-discovery-schedules.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"DeleteAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.delete-attack-discovery-schedules","name":"delete-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"DELETE","x-path":"/api/attack_discovery/schedules/{id}","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (UUID) of the Attack Discovery schedule to delete. This ID is returned when creating a schedule and can be found in schedule listings.","x-found-in":"path"}},"required":["id"]}

package/src/kibana/json/security-attack-discovery-api.delete-attack-discovery-schedules.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"DeleteAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.delete-attack-discovery-schedules","name":"delete-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"type":"object","properties":{"id":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_NonEmptyString","description":"The unique identifier of the deleted Attack Discovery schedule"}},"required":["id"]}

package/src/kibana/json/security-attack-discovery-api.disable-attack-discovery-schedules.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"DisableAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.disable-attack-discovery-schedules","name":"disable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/schedules/{id}/_disable","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (UUID) of the Attack Discovery schedule to disable. This ID is returned when creating a schedule and can be found in schedule listings.","x-found-in":"path"}},"required":["id"]}

package/src/kibana/json/security-attack-discovery-api.disable-attack-discovery-schedules.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"DisableAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.disable-attack-discovery-schedules","name":"disable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"type":"object","properties":{"id":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_NonEmptyString","description":"The unique identifier of the disabled Attack Discovery schedule"}},"required":["id"]}

package/src/kibana/json/security-attack-discovery-api.enable-attack-discovery-schedules.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"EnableAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.enable-attack-discovery-schedules","name":"enable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/schedules/{id}/_enable","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (UUID) of the Attack Discovery schedule to enable. This ID is returned when creating a schedule and can be found in schedule listings.","x-found-in":"path"}},"required":["id"]}

package/src/kibana/json/security-attack-discovery-api.enable-attack-discovery-schedules.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"EnableAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.enable-attack-discovery-schedules","name":"enable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"type":"object","properties":{"id":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_NonEmptyString","description":"The unique identifier of the enabled Attack Discovery schedule"}},"required":["id"]}

package/src/kibana/json/security-attack-discovery-api.find-attack-discovery-schedules.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"FindAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.find-attack-discovery-schedules","name":"find-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"GET","x-path":"/api/attack_discovery/schedules/_find","x-destructive":false,"type":"object","properties":{"page":{"type":"number","description":"Page number to return (used for pagination). Defaults to 1.","x-found-in":"query"},"per_page":{"type":"number","description":"Number of Attack Discovery schedules to return per page (used for pagination). Defaults to 10.","x-found-in":"query"},"sort_field":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_NonEmptyString","description":"Field used to sort results. Common fields include 'name', 'created_at', 'updated_at', and 'enabled'.","x-found-in":"query"},"sort_direction":{"enum":["asc","desc"],"description":"Sort order direction. Use 'asc' for ascending or 'desc' for descending. Defaults to 'asc'.","x-found-in":"query"}}}

package/src/kibana/json/security-attack-discovery-api.find-attack-discovery-schedules.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"FindAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.find-attack-discovery-schedules","name":"find-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"type":"object","properties":{"data":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiSchedule"},"description":"Array of matched Attack Discovery schedule objects."},"page":{"type":"number","description":"Current page number of the paginated result set."},"per_page":{"type":"number","description":"Number of items requested per page."},"total":{"type":"number","description":"Total number of Attack Discovery schedules matching the query (across all pages)."}},"required":["page","per_page","total","data"]}

package/src/kibana/json/security-attack-discovery-api.get-attack-discovery-generation.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"GetAttackDiscoveryGeneration","x-api":{"id":"security-attack-discovery-api.get-attack-discovery-generation","name":"get-attack-discovery-generation","namespace":"security-attack-discovery-api"},"x-method":"GET","x-path":"/api/attack_discovery/generations/{execution_uuid}","x-destructive":false,"type":"object","properties":{"execution_uuid":{"type":"string","description":"The unique identifier for the Attack Discovery generation execution. This UUID is returned at the start of an Attack Discovery generation.","x-found-in":"path"},"enable_field_rendering":{"type":"boolean","description":"Enables a markdown syntax used to render pivot fields, for example `{{ user.name james }}`. When disabled, the same example would be rendered as `james`. This is primarily used for Attack Discovery views within Kibana. Defaults to `false`.","x-found-in":"query"},"with_replacements":{"type":"boolean","description":"When true, return the created Attack discoveries with text replacements applied to the detailsMarkdown, entitySummaryMarkdown, summaryMarkdown, and title fields. Defaults to `true`.","x-found-in":"query"}},"required":["execution_uuid"]}

package/src/kibana/json/security-attack-discovery-api.get-attack-discovery-generation.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"GetAttackDiscoveryGeneration","x-api":{"id":"security-attack-discovery-api.get-attack-discovery-generation","name":"get-attack-discovery-generation","namespace":"security-attack-discovery-api"},"type":"object","properties":{"data":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiAlert"},"description":"Array of Attack discoveries generated during this execution."},"generation":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryGeneration","description":"Optional metadata about the attack discovery generation process, metadata including execution status and statistics. This metadata may not be available for all generations."}},"required":["data"]}

package/src/kibana/json/security-attack-discovery-api.get-attack-discovery-generations.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"GetAttackDiscoveryGenerations","x-api":{"id":"security-attack-discovery-api.get-attack-discovery-generations","name":"get-attack-discovery-generations","namespace":"security-attack-discovery-api"},"x-method":"GET","x-path":"/api/attack_discovery/generations","x-destructive":false,"type":"object","properties":{"end":{"type":"string","description":"End of the time range for filtering generations. Accepts absolute timestamps (ISO 8601) or relative date math (e.g. \"now\", \"now-24h\").","x-found-in":"query"},"size":{"type":"number","description":"The maximum number of generations to retrieve","x-found-in":"query"},"start":{"type":"string","description":"Start of the time range for filtering generations. Accepts absolute timestamps (ISO 8601) or relative date math (e.g. \"now-7d\").","x-found-in":"query"}}}

package/src/kibana/json/security-attack-discovery-api.get-attack-discovery-generations.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"GetAttackDiscoveryGenerations","x-api":{"id":"security-attack-discovery-api.get-attack-discovery-generations","name":"get-attack-discovery-generations","namespace":"security-attack-discovery-api"},"type":"object","properties":{"generations":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryGeneration"},"description":"List of Attack Discovery generations"}},"required":["generations"]}

package/src/kibana/json/security-attack-discovery-api.get-attack-discovery-schedules.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"GetAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.get-attack-discovery-schedules","name":"get-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"GET","x-path":"/api/attack_discovery/schedules/{id}","x-destructive":false,"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (UUID) of the Attack Discovery schedule to retrieve. This ID is returned when creating a schedule and can be found in schedule listings.","x-found-in":"path"}},"required":["id"]}

package/src/kibana/json/security-attack-discovery-api.get-attack-discovery-schedules.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"GetAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.get-attack-discovery-schedules","name":"get-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiSchedule"}

package/src/kibana/json/security-attack-discovery-api.post-attack-discovery-bulk.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PostAttackDiscoveryBulk","x-api":{"id":"security-attack-discovery-api.post-attack-discovery-bulk","name":"post-attack-discovery-bulk","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/_bulk","x-destructive":true,"type":"object","properties":{"update":{"type":"object","properties":{"enable_field_rendering":{"type":"boolean","description":"Enables a markdown syntax used to render pivot fields, for example `{{ user.name james }}`. When disabled, the same example would be rendered as `james`. This is primarily used for Attack Discovery views within Kibana. Defaults to `false`."},"ids":{"type":"array","items":{"type":"string"},"description":"Array of Attack Discovery IDs to update"},"kibana_alert_workflow_status":{"enum":["open","acknowledged","closed"],"description":"When provided, update the kibana.alert.workflow_status of the attack discovery alerts"},"visibility":{"enum":["not_shared","shared"],"description":"When provided, update the visibility of the alert, as determined by the kibana.alert.attack_discovery.users field"},"with_replacements":{"type":"boolean","description":"When true, returns the updated Attack discoveries with text replacements applied to the detailsMarkdown, entitySummaryMarkdown, summaryMarkdown, and title fields. This substitutes anonymized values with human-readable equivalents. Defaults to `true`."}},"required":["ids"],"description":"Configuration object containing all parameters for the bulk update operation","x-found-in":"body"}},"required":["update"]}

package/src/kibana/json/security-attack-discovery-api.post-attack-discovery-bulk.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PostAttackDiscoveryBulk","x-api":{"id":"security-attack-discovery-api.post-attack-discovery-bulk","name":"post-attack-discovery-bulk","namespace":"security-attack-discovery-api"},"type":"object","properties":{"data":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiAlert"},"description":"Array of updated Attack Discovery alert objects. Each item includes the applied modifications from the bulk update request."}},"required":["data"]}

package/src/kibana/json/security-attack-discovery-api.post-attack-discovery-generate.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PostAttackDiscoveryGenerate","x-api":{"id":"security-attack-discovery-api.post-attack-discovery-generate","name":"post-attack-discovery-generate","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/_generate","x-destructive":true,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryGenerationConfig","x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/security-attack-discovery-api.post-attack-discovery-generate.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PostAttackDiscoveryGenerate","x-api":{"id":"security-attack-discovery-api.post-attack-discovery-generate","name":"post-attack-discovery-generate","namespace":"security-attack-discovery-api"},"type":"object","properties":{"execution_uuid":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_NonEmptyString","description":"The unique identifier for the attack discovery generation process. Use this UUID to track the generation progress and retrieve results via the find endpoint."}},"required":["execution_uuid"]}

package/src/kibana/json/security-attack-discovery-api.post-attack-discovery-generations-dismiss.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PostAttackDiscoveryGenerationsDismiss","x-api":{"id":"security-attack-discovery-api.post-attack-discovery-generations-dismiss","name":"post-attack-discovery-generations-dismiss","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/generations/{execution_uuid}/_dismiss","x-destructive":true,"type":"object","properties":{"execution_uuid":{"type":"string","description":"The unique identifier for the Attack Discovery generation execution. This UUID is returned when an Attack Discovery generation is created and can be found in generation responses.","x-found-in":"path"}},"required":["execution_uuid"]}

package/src/kibana/json/security-attack-discovery-api.post-attack-discovery-generations-dismiss.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PostAttackDiscoveryGenerationsDismiss","x-api":{"id":"security-attack-discovery-api.post-attack-discovery-generations-dismiss","name":"post-attack-discovery-generations-dismiss","namespace":"security-attack-discovery-api"},"type":"object","properties":{"alerts_context_count":{"type":"number","description":"The number of alerts that were sent as context to the LLM for this generation."},"connector_id":{"type":"string","description":"The unique identifier of the connector used to generate the attack discoveries."},"connector_stats":{"type":"object","properties":{"average_successful_duration_nanoseconds":{"type":"number","description":"The average duration in nanoseconds for successful generations using this connector by the current user."},"successful_generations":{"type":"number","description":"The total number of Attack discoveries successfully created for this generation"}},"description":"Statistical information about the connector's performance for this user, providing insights into usage patterns and success rates."},"discoveries":{"type":"number","description":"The number of attack discoveries that were generated during this execution."},"end":{"type":"string","description":"The timestamp when the generation process completed, in ISO 8601 format. This field may be absent for generations that haven't finished."},"execution_uuid":{"type":"string","description":"The unique identifier for this attack discovery generation execution. This UUID can be used to reference this specific generation in other API calls."},"loading_message":{"type":"string","description":"A human-readable message describing the current state or progress of the generation process. Provides context about what the AI is analyzing."},"reason":{"type":"string","description":"Additional context or reasoning provided when a generation fails or encounters issues. This field helps diagnose problems with the generation process."},"start":{"type":"string","description":"The timestamp when the generation process began, in ISO 8601 format. This marks the beginning of the AI analysis."},"status":{"enum":["canceled","dismissed","failed","started","succeeded"],"description":"The current status of the attack discovery generation. After dismissing, this will be set to \"dismissed\"."}},"required":["connector_id","discoveries","execution_uuid","loading_message","start","status"]}

package/src/kibana/json/security-attack-discovery-api.update-attack-discovery-schedules.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.update-attack-discovery-schedules","name":"update-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"PUT","x-path":"/api/attack_discovery/schedules/{id}","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (UUID) of the Attack Discovery schedule to update. This ID is returned when creating a schedule and can be found in schedule listings.","x-found-in":"path"},"body":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiScheduleUpdateProps","x-found-in":"body","x-body-root":true}},"required":["id"]}

package/src/kibana/json/security-attack-discovery-api.update-attack-discovery-schedules.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.update-attack-discovery-schedules","name":"update-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiSchedule"}

package/src/kibana/json/security-detections-api.create-rule.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"CreateRule","x-api":{"id":"security-detections-api.create-rule","name":"create-rule","namespace":"security-detections-api"},"x-method":"POST","x-path":"/api/detection_engine/rules","x-destructive":false,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleCreateProps","x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/security-detections-api.create-rule.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"CreateRule","x-api":{"id":"security-detections-api.create-rule","name":"create-rule","namespace":"security-detections-api"},"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleResponse"}

package/src/kibana/json/security-detections-api.delete-rule.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"DeleteRule","x-api":{"id":"security-detections-api.delete-rule","name":"delete-rule","namespace":"security-detections-api"},"x-method":"DELETE","x-path":"/api/detection_engine/rules","x-destructive":true,"type":"object","properties":{"id":{"$ref":"./_defs.json#/$defs/Security_Detections_API_UUID","description":"The rule's `id` value.","x-found-in":"query"},"rule_id":{"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleSignatureId","description":"The rule's `rule_id` value.","x-found-in":"query"}}}

package/src/kibana/json/security-detections-api.delete-rule.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"DeleteRule","x-api":{"id":"security-detections-api.delete-rule","name":"delete-rule","namespace":"security-detections-api"},"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleResponse"}

package/src/kibana/json/security-detections-api.export-rules.request.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ExportRules","x-api":{"id":"security-detections-api.export-rules","name":"export-rules","namespace":"security-detections-api"},"x-method":"POST","x-path":"/api/detection_engine/rules/_export","x-destructive":true,"x-response-type":"ndjson","type":"object","properties":{"exclude_export_details":{"type":"boolean","description":"Determines whether a summary of the exported rules is returned.","x-found-in":"query"},"file_name":{"type":"string","description":"File name for saving the exported rules.\n> info\n> When using cURL to export rules to a file, use the -O and -J options to save the rules to the file name specified in the URL.\n","x-found-in":"query"},"body":{"oneOf":[{"type":"object","properties":{"objects":{"type":"array","items":{"type":"object","properties":{"rule_id":{"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleSignatureId"}},"required":["rule_id"]},"description":"Array of objects with a rule's `rule_id` field. Do not use rule's `id` here. Exports all rules when unspecified."}},"required":["objects"]},{"type":"null"}],"x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/security-detections-api.export-rules.response.json

@@ -0,0 +1 @@
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ExportRules","x-api":{"id":"security-detections-api.export-rules","name":"export-rules","namespace":"security-detections-api"},"type":"object","properties":{}}