@elastic/schemas 0.6.0 → 0.6.2

package/src/kibana/json/security-ai-assistant-api.read-knowledge-base.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadKnowledgeBase","x-api":{"id":"security-ai-assistant-api.read-knowledge-base","name":"read-knowledge-base","namespace":"security-ai-assistant-api"},"x-method":"GET","x-path":"/api/security_ai_assistant/knowledge_base/{resource}","x-destructive":false,"type":"object","properties":{"resource":{"type":"string","description":"The KnowledgeBase `resource` value.","x-found-in":"path"}},"required":["resource"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"read-knowledge-base","x-api":{"id":"security-ai-assistant-api.read-knowledge-base","name":"read-knowledge-base","namespace":"security-ai-assistant-api"},"x-method":"GET","x-path":"/api/security_ai_assistant/knowledge_base/{resource}","x-destructive":false,"type":"object","properties":{"resource":{"type":"string","description":"The KnowledgeBase `resource` value.","x-found-in":"path"}},"required":["resource"]}

package/src/kibana/json/security-ai-assistant-api.read-knowledge-base.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadKnowledgeBase","x-api":{"id":"security-ai-assistant-api.read-knowledge-base","name":"read-knowledge-base","namespace":"security-ai-assistant-api"},"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseReadResponse200"}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"read-knowledge-base","x-api":{"id":"security-ai-assistant-api.read-knowledge-base","name":"read-knowledge-base","namespace":"security-ai-assistant-api"},"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseReadResponse200"}

package/src/kibana/json/security-ai-assistant-api.update-conversation.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateConversation","x-api":{"id":"security-ai-assistant-api.update-conversation","name":"update-conversation","namespace":"security-ai-assistant-api"},"x-method":"PUT","x-path":"/api/security_ai_assistant/current_user/conversations/{id}","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The conversation's `id` value.","x-found-in":"path"},"body":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_ConversationUpdateProps","x-found-in":"body","x-body-root":true}},"required":["id"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"update-conversation","x-api":{"id":"security-ai-assistant-api.update-conversation","name":"update-conversation","namespace":"security-ai-assistant-api"},"x-method":"PUT","x-path":"/api/security_ai_assistant/current_user/conversations/{id}","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The conversation's `id` value.","x-found-in":"path"},"body":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_ConversationUpdateProps","x-found-in":"body","x-body-root":true}},"required":["id"]}

package/src/kibana/json/security-ai-assistant-api.update-conversation.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateConversation","x-api":{"id":"security-ai-assistant-api.update-conversation","name":"update-conversation","namespace":"security-ai-assistant-api"},"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_ConversationResponse"}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"update-conversation","x-api":{"id":"security-ai-assistant-api.update-conversation","name":"update-conversation","namespace":"security-ai-assistant-api"},"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_ConversationResponse"}

package/src/kibana/json/security-ai-assistant-api.update-knowledge-base-entry.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateKnowledgeBaseEntry","x-api":{"id":"security-ai-assistant-api.update-knowledge-base-entry","name":"update-knowledge-base-entry","namespace":"security-ai-assistant-api"},"x-method":"PUT","x-path":"/api/security_ai_assistant/knowledge_base/entries/{id}","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (`id`) of the Knowledge Base Entry to update.","x-found-in":"path"},"body":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseEntryUpdateRouteProps","x-found-in":"body","x-body-root":true}},"required":["id"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"update-knowledge-base-entry","x-api":{"id":"security-ai-assistant-api.update-knowledge-base-entry","name":"update-knowledge-base-entry","namespace":"security-ai-assistant-api"},"x-method":"PUT","x-path":"/api/security_ai_assistant/knowledge_base/entries/{id}","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (`id`) of the Knowledge Base Entry to update.","x-found-in":"path"},"body":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseEntryUpdateRouteProps","x-found-in":"body","x-body-root":true}},"required":["id"]}

package/src/kibana/json/security-ai-assistant-api.update-knowledge-base-entry.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateKnowledgeBaseEntry","x-api":{"id":"security-ai-assistant-api.update-knowledge-base-entry","name":"update-knowledge-base-entry","namespace":"security-ai-assistant-api"},"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseEntryResponse"}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"update-knowledge-base-entry","x-api":{"id":"security-ai-assistant-api.update-knowledge-base-entry","name":"update-knowledge-base-entry","namespace":"security-ai-assistant-api"},"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseEntryResponse"}

package/src/kibana/json/security-attack-discovery-api.attack-discovery-find.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"AttackDiscoveryFind","x-api":{"id":"security-attack-discovery-api.attack-discovery-find","name":"attack-discovery-find","namespace":"security-attack-discovery-api"},"x-method":"GET","x-path":"/api/attack_discovery/_find","x-destructive":false,"type":"object","properties":{"alert_ids":{"type":"array","items":{"type":"string"},"description":"Filter results to Attack discoveries that include any of the provided alert IDs","x-found-in":"query"},"connector_names":{"type":"array","items":{"type":"string"},"description":"Filter results to Attack discoveries created by any of the provided human readable connector names. Note that values must match the human readable `connector_name` property of an Attack discovery, e.g. \"GPT-5 Chat\", which are distinct from `connector_id` values used to generate Attack discoveries.","x-found-in":"query"},"enable_field_rendering":{"type":"boolean","description":"Enables a markdown syntax used to render pivot fields, for example `{{ user.name james }}`. When disabled, the same example would be rendered as `james`. This is primarily used for Attack Discovery views within Kibana. Defaults to `false`.","x-found-in":"query"},"end":{"type":"string","description":"End of the time range for the search. Accepts absolute timestamps (ISO 8601) or relative date math (e.g. \"now\", \"now-24h\").","x-found-in":"query"},"ids":{"type":"array","items":{"type":"string"},"description":"Filter results to the Attack discoveries with the specified IDs","x-found-in":"query"},"include_unique_alert_ids":{"type":"boolean","description":"If `true`, the response will include `unique_alert_ids` and `unique_alert_ids_count` aggregated across the matched Attack discoveries","x-found-in":"query"},"page":{"type":"number","description":"Page number to return (used for pagination). Defaults to 1.","x-found-in":"query"},"per_page":{"type":"number","description":"Number of Attack discoveries to return per page (used for pagination). Defaults to 10.","x-found-in":"query"},"search":{"type":"string","description":"Free-text search query applied to relevant text fields of Attack discoveries (title, description, tags, etc.)","x-found-in":"query"},"shared":{"type":"boolean","description":"Whether to filter by shared visibility. If omitted, both shared and privately visible Attack discoveries are returned. Use `true` to return only shared discoveries, `false` to return only those visible to the current user. Mutually exclusive with `include_all_authors`.","x-found-in":"query"},"include_all_authors":{"type":"boolean","description":"If `true`, the response will include all attack discoveries matching other criteria regardless of who created them. Mutually exclusive with `shared`.","x-found-in":"query"},"scheduled":{"type":"boolean","description":"Whether to filter by scheduled or ad-hoc attack discoveries. If omitted, both types of attack discoveries are returned. Use `true` to return only scheduled discoveries or `false` to return only ad-hoc discoveries.","x-found-in":"query"},"sort_field":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryFindSortField","description":"Field used to sort results. See `AttackDiscoveryFindSortField` for allowed values.","x-found-in":"query"},"sort_order":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_SortOrder","description":"Sort order direction `asc` for ascending or `desc` for descending. Defaults to `desc`.","x-found-in":"query"},"start":{"type":"string","description":"Start of the time range for the search. Accepts absolute timestamps (ISO 8601) or relative date math (e.g. \"now-7d\").","x-found-in":"query"},"status":{"type":"array","items":{"enum":["acknowledged","closed","open"]},"description":"Filter by alert workflow status. Provide one or more of the allowed workflow states.","x-found-in":"query"},"with_replacements":{"type":"boolean","description":"When true, return the created Attack discoveries with text replacements applied to the detailsMarkdown, entitySummaryMarkdown, summaryMarkdown, and title fields. Defaults to `true`.","x-found-in":"query"}}}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"attack-discovery-find","x-api":{"id":"security-attack-discovery-api.attack-discovery-find","name":"attack-discovery-find","namespace":"security-attack-discovery-api"},"x-method":"GET","x-path":"/api/attack_discovery/_find","x-destructive":false,"type":"object","properties":{"alert_ids":{"type":"array","items":{"type":"string"},"description":"Filter results to Attack discoveries that include any of the provided alert IDs","x-found-in":"query"},"connector_names":{"type":"array","items":{"type":"string"},"description":"Filter results to Attack discoveries created by any of the provided human readable connector names. Note that values must match the human readable `connector_name` property of an Attack discovery, e.g. \"GPT-5 Chat\", which are distinct from `connector_id` values used to generate Attack discoveries.","x-found-in":"query"},"enable_field_rendering":{"type":"boolean","description":"Enables a markdown syntax used to render pivot fields, for example `{{ user.name james }}`. When disabled, the same example would be rendered as `james`. This is primarily used for Attack Discovery views within Kibana. Defaults to `false`.","x-found-in":"query"},"end":{"type":"string","description":"End of the time range for the search. Accepts absolute timestamps (ISO 8601) or relative date math (e.g. \"now\", \"now-24h\").","x-found-in":"query"},"ids":{"type":"array","items":{"type":"string"},"description":"Filter results to the Attack discoveries with the specified IDs","x-found-in":"query"},"include_unique_alert_ids":{"type":"boolean","description":"If `true`, the response will include `unique_alert_ids` and `unique_alert_ids_count` aggregated across the matched Attack discoveries","x-found-in":"query"},"page":{"type":"number","description":"Page number to return (used for pagination). Defaults to 1.","x-found-in":"query"},"per_page":{"type":"number","description":"Number of Attack discoveries to return per page (used for pagination). Defaults to 10.","x-found-in":"query"},"search":{"type":"string","description":"Free-text search query applied to relevant text fields of Attack discoveries (title, description, tags, etc.)","x-found-in":"query"},"shared":{"type":"boolean","description":"Whether to filter by shared visibility. If omitted, both shared and privately visible Attack discoveries are returned. Use `true` to return only shared discoveries, `false` to return only those visible to the current user. Mutually exclusive with `include_all_authors`.","x-found-in":"query"},"include_all_authors":{"type":"boolean","description":"If `true`, the response will include all attack discoveries matching other criteria regardless of who created them. Mutually exclusive with `shared`.","x-found-in":"query"},"scheduled":{"type":"boolean","description":"Whether to filter by scheduled or ad-hoc attack discoveries. If omitted, both types of attack discoveries are returned. Use `true` to return only scheduled discoveries or `false` to return only ad-hoc discoveries.","x-found-in":"query"},"sort_field":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryFindSortField","description":"Field used to sort results. See `AttackDiscoveryFindSortField` for allowed values.","x-found-in":"query"},"sort_order":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_SortOrder","description":"Sort order direction `asc` for ascending or `desc` for descending. Defaults to `desc`.","x-found-in":"query"},"start":{"type":"string","description":"Start of the time range for the search. Accepts absolute timestamps (ISO 8601) or relative date math (e.g. \"now-7d\").","x-found-in":"query"},"status":{"type":"array","items":{"enum":["acknowledged","closed","open"]},"description":"Filter by alert workflow status. Provide one or more of the allowed workflow states.","x-found-in":"query"},"with_replacements":{"type":"boolean","description":"When true, return the created Attack discoveries with text replacements applied to the detailsMarkdown, entitySummaryMarkdown, summaryMarkdown, and title fields. Defaults to `true`.","x-found-in":"query"}}}

package/src/kibana/json/security-attack-discovery-api.attack-discovery-find.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"AttackDiscoveryFind","x-api":{"id":"security-attack-discovery-api.attack-discovery-find","name":"attack-discovery-find","namespace":"security-attack-discovery-api"},"type":"object","properties":{"connector_names":{"type":"array","items":{"type":"string"},"description":"List of human readable connector names that are present in the matched Attack discoveries. Useful for building client filters or summaries."},"data":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiAlert"},"description":"Array of matched Attack discovery objects. Each item follows the `AttackDiscoveryApiAlert` schema."},"page":{"type":"number","description":"Current page number of the paginated result set."},"per_page":{"type":"number","description":"Number of items requested per page."},"total":{"type":"number","description":"Total number of Attack discoveries matching the query (across all pages)."},"unique_alert_ids":{"type":"array","items":{"type":"string"},"description":"List of unique alert IDs aggregated from the matched Attack discoveries. Only present if `include_unique_alert_ids=true` in the request."},"unique_alert_ids_count":{"type":"number","description":"Number of unique alert IDs across all matched Attack discoveries. Only present if `include_unique_alert_ids=true` in the request."}},"required":["connector_names","data","page","per_page","total","unique_alert_ids_count"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"attack-discovery-find","x-api":{"id":"security-attack-discovery-api.attack-discovery-find","name":"attack-discovery-find","namespace":"security-attack-discovery-api"},"type":"object","properties":{"connector_names":{"type":"array","items":{"type":"string"},"description":"List of human readable connector names that are present in the matched Attack discoveries. Useful for building client filters or summaries."},"data":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiAlert"},"description":"Array of matched Attack discovery objects. Each item follows the `AttackDiscoveryApiAlert` schema."},"page":{"type":"number","description":"Current page number of the paginated result set."},"per_page":{"type":"number","description":"Number of items requested per page."},"total":{"type":"number","description":"Total number of Attack discoveries matching the query (across all pages)."},"unique_alert_ids":{"type":"array","items":{"type":"string"},"description":"List of unique alert IDs aggregated from the matched Attack discoveries. Only present if `include_unique_alert_ids=true` in the request."},"unique_alert_ids_count":{"type":"number","description":"Number of unique alert IDs across all matched Attack discoveries. Only present if `include_unique_alert_ids=true` in the request."}},"required":["connector_names","data","page","per_page","total","unique_alert_ids_count"]}

package/src/kibana/json/security-attack-discovery-api.bulk-delete-attack-discovery-schedules.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"BulkDeleteAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.bulk-delete-attack-discovery-schedules","name":"bulk-delete-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/schedules/_bulk_delete","x-destructive":true,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_BulkActionAttackDiscoverySchedulesRequestBody","x-found-in":"body","x-body-root":true}}}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"bulk-delete-attack-discovery-schedules","x-api":{"id":"security-attack-discovery-api.bulk-delete-attack-discovery-schedules","name":"bulk-delete-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/schedules/_bulk_delete","x-destructive":true,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_BulkActionAttackDiscoverySchedulesRequestBody","x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/security-attack-discovery-api.bulk-delete-attack-discovery-schedules.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"BulkDeleteAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.bulk-delete-attack-discovery-schedules","name":"bulk-delete-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_BulkActionAttackDiscoverySchedulesResponse"}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"bulk-delete-attack-discovery-schedules","x-api":{"id":"security-attack-discovery-api.bulk-delete-attack-discovery-schedules","name":"bulk-delete-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_BulkActionAttackDiscoverySchedulesResponse"}

package/src/kibana/json/security-attack-discovery-api.bulk-disable-attack-discovery-schedules.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"BulkDisableAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.bulk-disable-attack-discovery-schedules","name":"bulk-disable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/schedules/_bulk_disable","x-destructive":true,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_BulkActionAttackDiscoverySchedulesRequestBody","x-found-in":"body","x-body-root":true}}}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"bulk-disable-attack-discovery-schedules","x-api":{"id":"security-attack-discovery-api.bulk-disable-attack-discovery-schedules","name":"bulk-disable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/schedules/_bulk_disable","x-destructive":true,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_BulkActionAttackDiscoverySchedulesRequestBody","x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/security-attack-discovery-api.bulk-disable-attack-discovery-schedules.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"BulkDisableAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.bulk-disable-attack-discovery-schedules","name":"bulk-disable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_BulkActionAttackDiscoverySchedulesResponse"}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"bulk-disable-attack-discovery-schedules","x-api":{"id":"security-attack-discovery-api.bulk-disable-attack-discovery-schedules","name":"bulk-disable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_BulkActionAttackDiscoverySchedulesResponse"}

package/src/kibana/json/security-attack-discovery-api.bulk-enable-attack-discovery-schedules.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"BulkEnableAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.bulk-enable-attack-discovery-schedules","name":"bulk-enable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/schedules/_bulk_enable","x-destructive":true,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_BulkActionAttackDiscoverySchedulesRequestBody","x-found-in":"body","x-body-root":true}}}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"bulk-enable-attack-discovery-schedules","x-api":{"id":"security-attack-discovery-api.bulk-enable-attack-discovery-schedules","name":"bulk-enable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/schedules/_bulk_enable","x-destructive":true,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_BulkActionAttackDiscoverySchedulesRequestBody","x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/security-attack-discovery-api.bulk-enable-attack-discovery-schedules.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"BulkEnableAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.bulk-enable-attack-discovery-schedules","name":"bulk-enable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_BulkActionAttackDiscoverySchedulesResponse"}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"bulk-enable-attack-discovery-schedules","x-api":{"id":"security-attack-discovery-api.bulk-enable-attack-discovery-schedules","name":"bulk-enable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_BulkActionAttackDiscoverySchedulesResponse"}

package/src/kibana/json/security-attack-discovery-api.create-attack-discovery-schedules.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"CreateAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.create-attack-discovery-schedules","name":"create-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/schedules","x-destructive":false,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiScheduleCreateProps","x-found-in":"body","x-body-root":true}}}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"create-attack-discovery-schedules","x-api":{"id":"security-attack-discovery-api.create-attack-discovery-schedules","name":"create-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/schedules","x-destructive":false,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiScheduleCreateProps","x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/security-attack-discovery-api.create-attack-discovery-schedules.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"CreateAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.create-attack-discovery-schedules","name":"create-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiSchedule"}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"create-attack-discovery-schedules","x-api":{"id":"security-attack-discovery-api.create-attack-discovery-schedules","name":"create-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiSchedule"}

package/src/kibana/json/security-attack-discovery-api.delete-attack-discovery-schedules.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"DeleteAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.delete-attack-discovery-schedules","name":"delete-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"DELETE","x-path":"/api/attack_discovery/schedules/{id}","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (UUID) of the Attack Discovery schedule to delete. This ID is returned when creating a schedule and can be found in schedule listings.","x-found-in":"path"}},"required":["id"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"delete-attack-discovery-schedules","x-api":{"id":"security-attack-discovery-api.delete-attack-discovery-schedules","name":"delete-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"DELETE","x-path":"/api/attack_discovery/schedules/{id}","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (UUID) of the Attack Discovery schedule to delete. This ID is returned when creating a schedule and can be found in schedule listings.","x-found-in":"path"}},"required":["id"]}

package/src/kibana/json/security-attack-discovery-api.delete-attack-discovery-schedules.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"DeleteAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.delete-attack-discovery-schedules","name":"delete-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"type":"object","properties":{"id":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_NonEmptyString","description":"The unique identifier of the deleted Attack Discovery schedule"}},"required":["id"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"delete-attack-discovery-schedules","x-api":{"id":"security-attack-discovery-api.delete-attack-discovery-schedules","name":"delete-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"type":"object","properties":{"id":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_NonEmptyString","description":"The unique identifier of the deleted Attack Discovery schedule"}},"required":["id"]}

package/src/kibana/json/security-attack-discovery-api.disable-attack-discovery-schedules.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"DisableAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.disable-attack-discovery-schedules","name":"disable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/schedules/{id}/_disable","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (UUID) of the Attack Discovery schedule to disable. This ID is returned when creating a schedule and can be found in schedule listings.","x-found-in":"path"}},"required":["id"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"disable-attack-discovery-schedules","x-api":{"id":"security-attack-discovery-api.disable-attack-discovery-schedules","name":"disable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/schedules/{id}/_disable","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (UUID) of the Attack Discovery schedule to disable. This ID is returned when creating a schedule and can be found in schedule listings.","x-found-in":"path"}},"required":["id"]}

package/src/kibana/json/security-attack-discovery-api.disable-attack-discovery-schedules.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"DisableAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.disable-attack-discovery-schedules","name":"disable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"type":"object","properties":{"id":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_NonEmptyString","description":"The unique identifier of the disabled Attack Discovery schedule"}},"required":["id"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"disable-attack-discovery-schedules","x-api":{"id":"security-attack-discovery-api.disable-attack-discovery-schedules","name":"disable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"type":"object","properties":{"id":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_NonEmptyString","description":"The unique identifier of the disabled Attack Discovery schedule"}},"required":["id"]}

package/src/kibana/json/security-attack-discovery-api.enable-attack-discovery-schedules.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"EnableAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.enable-attack-discovery-schedules","name":"enable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/schedules/{id}/_enable","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (UUID) of the Attack Discovery schedule to enable. This ID is returned when creating a schedule and can be found in schedule listings.","x-found-in":"path"}},"required":["id"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"enable-attack-discovery-schedules","x-api":{"id":"security-attack-discovery-api.enable-attack-discovery-schedules","name":"enable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/schedules/{id}/_enable","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (UUID) of the Attack Discovery schedule to enable. This ID is returned when creating a schedule and can be found in schedule listings.","x-found-in":"path"}},"required":["id"]}

package/src/kibana/json/security-attack-discovery-api.enable-attack-discovery-schedules.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"EnableAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.enable-attack-discovery-schedules","name":"enable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"type":"object","properties":{"id":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_NonEmptyString","description":"The unique identifier of the enabled Attack Discovery schedule"}},"required":["id"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"enable-attack-discovery-schedules","x-api":{"id":"security-attack-discovery-api.enable-attack-discovery-schedules","name":"enable-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"type":"object","properties":{"id":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_NonEmptyString","description":"The unique identifier of the enabled Attack Discovery schedule"}},"required":["id"]}

package/src/kibana/json/security-attack-discovery-api.find-attack-discovery-schedules.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"FindAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.find-attack-discovery-schedules","name":"find-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"GET","x-path":"/api/attack_discovery/schedules/_find","x-destructive":false,"type":"object","properties":{"page":{"type":"number","description":"Page number to return (used for pagination). Defaults to 1.","x-found-in":"query"},"per_page":{"type":"number","description":"Number of Attack Discovery schedules to return per page (used for pagination). Defaults to 10.","x-found-in":"query"},"sort_field":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_NonEmptyString","description":"Field used to sort results. Common fields include 'name', 'created_at', 'updated_at', and 'enabled'.","x-found-in":"query"},"sort_direction":{"enum":["asc","desc"],"description":"Sort order direction. Use 'asc' for ascending or 'desc' for descending. Defaults to 'asc'.","x-found-in":"query"}}}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"find-attack-discovery-schedules","x-api":{"id":"security-attack-discovery-api.find-attack-discovery-schedules","name":"find-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"GET","x-path":"/api/attack_discovery/schedules/_find","x-destructive":false,"type":"object","properties":{"page":{"type":"number","description":"Page number to return (used for pagination). Defaults to 1.","x-found-in":"query"},"per_page":{"type":"number","description":"Number of Attack Discovery schedules to return per page (used for pagination). Defaults to 10.","x-found-in":"query"},"sort_field":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_NonEmptyString","description":"Field used to sort results. Common fields include 'name', 'created_at', 'updated_at', and 'enabled'.","x-found-in":"query"},"sort_direction":{"enum":["asc","desc"],"description":"Sort order direction. Use 'asc' for ascending or 'desc' for descending. Defaults to 'asc'.","x-found-in":"query"}}}

package/src/kibana/json/security-attack-discovery-api.find-attack-discovery-schedules.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"FindAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.find-attack-discovery-schedules","name":"find-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"type":"object","properties":{"data":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiSchedule"},"description":"Array of matched Attack Discovery schedule objects."},"page":{"type":"number","description":"Current page number of the paginated result set."},"per_page":{"type":"number","description":"Number of items requested per page."},"total":{"type":"number","description":"Total number of Attack Discovery schedules matching the query (across all pages)."}},"required":["page","per_page","total","data"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"find-attack-discovery-schedules","x-api":{"id":"security-attack-discovery-api.find-attack-discovery-schedules","name":"find-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"type":"object","properties":{"data":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiSchedule"},"description":"Array of matched Attack Discovery schedule objects."},"page":{"type":"number","description":"Current page number of the paginated result set."},"per_page":{"type":"number","description":"Number of items requested per page."},"total":{"type":"number","description":"Total number of Attack Discovery schedules matching the query (across all pages)."}},"required":["page","per_page","total","data"]}

package/src/kibana/json/security-attack-discovery-api.get-attack-discovery-generation.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"GetAttackDiscoveryGeneration","x-api":{"id":"security-attack-discovery-api.get-attack-discovery-generation","name":"get-attack-discovery-generation","namespace":"security-attack-discovery-api"},"x-method":"GET","x-path":"/api/attack_discovery/generations/{execution_uuid}","x-destructive":false,"type":"object","properties":{"execution_uuid":{"type":"string","description":"The unique identifier for the Attack Discovery generation execution. This UUID is returned at the start of an Attack Discovery generation.","x-found-in":"path"},"enable_field_rendering":{"type":"boolean","description":"Enables a markdown syntax used to render pivot fields, for example `{{ user.name james }}`. When disabled, the same example would be rendered as `james`. This is primarily used for Attack Discovery views within Kibana. Defaults to `false`.","x-found-in":"query"},"with_replacements":{"type":"boolean","description":"When true, return the created Attack discoveries with text replacements applied to the detailsMarkdown, entitySummaryMarkdown, summaryMarkdown, and title fields. Defaults to `true`.","x-found-in":"query"}},"required":["execution_uuid"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-attack-discovery-generation","x-api":{"id":"security-attack-discovery-api.get-attack-discovery-generation","name":"get-attack-discovery-generation","namespace":"security-attack-discovery-api"},"x-method":"GET","x-path":"/api/attack_discovery/generations/{execution_uuid}","x-destructive":false,"type":"object","properties":{"execution_uuid":{"type":"string","description":"The unique identifier for the Attack Discovery generation execution. This UUID is returned at the start of an Attack Discovery generation.","x-found-in":"path"},"enable_field_rendering":{"type":"boolean","description":"Enables a markdown syntax used to render pivot fields, for example `{{ user.name james }}`. When disabled, the same example would be rendered as `james`. This is primarily used for Attack Discovery views within Kibana. Defaults to `false`.","x-found-in":"query"},"with_replacements":{"type":"boolean","description":"When true, return the created Attack discoveries with text replacements applied to the detailsMarkdown, entitySummaryMarkdown, summaryMarkdown, and title fields. Defaults to `true`.","x-found-in":"query"}},"required":["execution_uuid"]}

package/src/kibana/json/security-attack-discovery-api.get-attack-discovery-generation.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"GetAttackDiscoveryGeneration","x-api":{"id":"security-attack-discovery-api.get-attack-discovery-generation","name":"get-attack-discovery-generation","namespace":"security-attack-discovery-api"},"type":"object","properties":{"data":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiAlert"},"description":"Array of Attack discoveries generated during this execution."},"generation":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryGeneration","description":"Optional metadata about the attack discovery generation process, metadata including execution status and statistics. This metadata may not be available for all generations."}},"required":["data"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-attack-discovery-generation","x-api":{"id":"security-attack-discovery-api.get-attack-discovery-generation","name":"get-attack-discovery-generation","namespace":"security-attack-discovery-api"},"type":"object","properties":{"data":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiAlert"},"description":"Array of Attack discoveries generated during this execution."},"generation":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryGeneration","description":"Optional metadata about the attack discovery generation process, metadata including execution status and statistics. This metadata may not be available for all generations."}},"required":["data"]}

package/src/kibana/json/security-attack-discovery-api.get-attack-discovery-generations.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"GetAttackDiscoveryGenerations","x-api":{"id":"security-attack-discovery-api.get-attack-discovery-generations","name":"get-attack-discovery-generations","namespace":"security-attack-discovery-api"},"x-method":"GET","x-path":"/api/attack_discovery/generations","x-destructive":false,"type":"object","properties":{"end":{"type":"string","description":"End of the time range for filtering generations. Accepts absolute timestamps (ISO 8601) or relative date math (e.g. \"now\", \"now-24h\").","x-found-in":"query"},"size":{"type":"number","description":"The maximum number of generations to retrieve","x-found-in":"query"},"start":{"type":"string","description":"Start of the time range for filtering generations. Accepts absolute timestamps (ISO 8601) or relative date math (e.g. \"now-7d\").","x-found-in":"query"}}}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-attack-discovery-generations","x-api":{"id":"security-attack-discovery-api.get-attack-discovery-generations","name":"get-attack-discovery-generations","namespace":"security-attack-discovery-api"},"x-method":"GET","x-path":"/api/attack_discovery/generations","x-destructive":false,"type":"object","properties":{"end":{"type":"string","description":"End of the time range for filtering generations. Accepts absolute timestamps (ISO 8601) or relative date math (e.g. \"now\", \"now-24h\").","x-found-in":"query"},"size":{"type":"number","description":"The maximum number of generations to retrieve","x-found-in":"query"},"start":{"type":"string","description":"Start of the time range for filtering generations. Accepts absolute timestamps (ISO 8601) or relative date math (e.g. \"now-7d\").","x-found-in":"query"}}}

package/src/kibana/json/security-attack-discovery-api.get-attack-discovery-generations.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"GetAttackDiscoveryGenerations","x-api":{"id":"security-attack-discovery-api.get-attack-discovery-generations","name":"get-attack-discovery-generations","namespace":"security-attack-discovery-api"},"type":"object","properties":{"generations":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryGeneration"},"description":"List of Attack Discovery generations"}},"required":["generations"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-attack-discovery-generations","x-api":{"id":"security-attack-discovery-api.get-attack-discovery-generations","name":"get-attack-discovery-generations","namespace":"security-attack-discovery-api"},"type":"object","properties":{"generations":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryGeneration"},"description":"List of Attack Discovery generations"}},"required":["generations"]}

package/src/kibana/json/security-attack-discovery-api.get-attack-discovery-schedules.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"GetAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.get-attack-discovery-schedules","name":"get-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"GET","x-path":"/api/attack_discovery/schedules/{id}","x-destructive":false,"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (UUID) of the Attack Discovery schedule to retrieve. This ID is returned when creating a schedule and can be found in schedule listings.","x-found-in":"path"}},"required":["id"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-attack-discovery-schedules","x-api":{"id":"security-attack-discovery-api.get-attack-discovery-schedules","name":"get-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"GET","x-path":"/api/attack_discovery/schedules/{id}","x-destructive":false,"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (UUID) of the Attack Discovery schedule to retrieve. This ID is returned when creating a schedule and can be found in schedule listings.","x-found-in":"path"}},"required":["id"]}

package/src/kibana/json/security-attack-discovery-api.get-attack-discovery-schedules.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"GetAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.get-attack-discovery-schedules","name":"get-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiSchedule"}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-attack-discovery-schedules","x-api":{"id":"security-attack-discovery-api.get-attack-discovery-schedules","name":"get-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiSchedule"}

package/src/kibana/json/security-attack-discovery-api.post-attack-discovery-bulk.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PostAttackDiscoveryBulk","x-api":{"id":"security-attack-discovery-api.post-attack-discovery-bulk","name":"post-attack-discovery-bulk","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/_bulk","x-destructive":true,"type":"object","properties":{"update":{"type":"object","properties":{"enable_field_rendering":{"type":"boolean","description":"Enables a markdown syntax used to render pivot fields, for example `{{ user.name james }}`. When disabled, the same example would be rendered as `james`. This is primarily used for Attack Discovery views within Kibana. Defaults to `false`."},"ids":{"type":"array","items":{"type":"string"},"description":"Array of Attack Discovery IDs to update"},"kibana_alert_workflow_status":{"enum":["open","acknowledged","closed"],"description":"When provided, update the kibana.alert.workflow_status of the attack discovery alerts"},"visibility":{"enum":["not_shared","shared"],"description":"When provided, update the visibility of the alert, as determined by the kibana.alert.attack_discovery.users field"},"with_replacements":{"type":"boolean","description":"When true, returns the updated Attack discoveries with text replacements applied to the detailsMarkdown, entitySummaryMarkdown, summaryMarkdown, and title fields. This substitutes anonymized values with human-readable equivalents. Defaults to `true`."}},"required":["ids"],"description":"Configuration object containing all parameters for the bulk update operation","x-found-in":"body"}},"required":["update"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-attack-discovery-bulk","x-api":{"id":"security-attack-discovery-api.post-attack-discovery-bulk","name":"post-attack-discovery-bulk","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/_bulk","x-destructive":true,"type":"object","properties":{"update":{"type":"object","properties":{"enable_field_rendering":{"type":"boolean","description":"Enables a markdown syntax used to render pivot fields, for example `{{ user.name james }}`. When disabled, the same example would be rendered as `james`. This is primarily used for Attack Discovery views within Kibana. Defaults to `false`."},"ids":{"type":"array","items":{"type":"string"},"description":"Array of Attack Discovery IDs to update"},"kibana_alert_workflow_status":{"enum":["open","acknowledged","closed"],"description":"When provided, update the kibana.alert.workflow_status of the attack discovery alerts"},"visibility":{"enum":["not_shared","shared"],"description":"When provided, update the visibility of the alert, as determined by the kibana.alert.attack_discovery.users field"},"with_replacements":{"type":"boolean","description":"When true, returns the updated Attack discoveries with text replacements applied to the detailsMarkdown, entitySummaryMarkdown, summaryMarkdown, and title fields. This substitutes anonymized values with human-readable equivalents. Defaults to `true`."}},"required":["ids"],"description":"Configuration object containing all parameters for the bulk update operation","x-found-in":"body"}},"required":["update"]}

package/src/kibana/json/security-attack-discovery-api.post-attack-discovery-bulk.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PostAttackDiscoveryBulk","x-api":{"id":"security-attack-discovery-api.post-attack-discovery-bulk","name":"post-attack-discovery-bulk","namespace":"security-attack-discovery-api"},"type":"object","properties":{"data":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiAlert"},"description":"Array of updated Attack Discovery alert objects. Each item includes the applied modifications from the bulk update request."}},"required":["data"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-attack-discovery-bulk","x-api":{"id":"security-attack-discovery-api.post-attack-discovery-bulk","name":"post-attack-discovery-bulk","namespace":"security-attack-discovery-api"},"type":"object","properties":{"data":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiAlert"},"description":"Array of updated Attack Discovery alert objects. Each item includes the applied modifications from the bulk update request."}},"required":["data"]}

package/src/kibana/json/security-attack-discovery-api.post-attack-discovery-generate.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PostAttackDiscoveryGenerate","x-api":{"id":"security-attack-discovery-api.post-attack-discovery-generate","name":"post-attack-discovery-generate","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/_generate","x-destructive":true,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryGenerationConfig","x-found-in":"body","x-body-root":true}}}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-attack-discovery-generate","x-api":{"id":"security-attack-discovery-api.post-attack-discovery-generate","name":"post-attack-discovery-generate","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/_generate","x-destructive":true,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryGenerationConfig","x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/security-attack-discovery-api.post-attack-discovery-generate.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PostAttackDiscoveryGenerate","x-api":{"id":"security-attack-discovery-api.post-attack-discovery-generate","name":"post-attack-discovery-generate","namespace":"security-attack-discovery-api"},"type":"object","properties":{"execution_uuid":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_NonEmptyString","description":"The unique identifier for the attack discovery generation process. Use this UUID to track the generation progress and retrieve results via the find endpoint."}},"required":["execution_uuid"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-attack-discovery-generate","x-api":{"id":"security-attack-discovery-api.post-attack-discovery-generate","name":"post-attack-discovery-generate","namespace":"security-attack-discovery-api"},"type":"object","properties":{"execution_uuid":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_NonEmptyString","description":"The unique identifier for the attack discovery generation process. Use this UUID to track the generation progress and retrieve results via the find endpoint."}},"required":["execution_uuid"]}

package/src/kibana/json/security-attack-discovery-api.post-attack-discovery-generations-dismiss.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PostAttackDiscoveryGenerationsDismiss","x-api":{"id":"security-attack-discovery-api.post-attack-discovery-generations-dismiss","name":"post-attack-discovery-generations-dismiss","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/generations/{execution_uuid}/_dismiss","x-destructive":true,"type":"object","properties":{"execution_uuid":{"type":"string","description":"The unique identifier for the Attack Discovery generation execution. This UUID is returned when an Attack Discovery generation is created and can be found in generation responses.","x-found-in":"path"}},"required":["execution_uuid"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-attack-discovery-generations-dismiss","x-api":{"id":"security-attack-discovery-api.post-attack-discovery-generations-dismiss","name":"post-attack-discovery-generations-dismiss","namespace":"security-attack-discovery-api"},"x-method":"POST","x-path":"/api/attack_discovery/generations/{execution_uuid}/_dismiss","x-destructive":true,"type":"object","properties":{"execution_uuid":{"type":"string","description":"The unique identifier for the Attack Discovery generation execution. This UUID is returned when an Attack Discovery generation is created and can be found in generation responses.","x-found-in":"path"}},"required":["execution_uuid"]}

package/src/kibana/json/security-attack-discovery-api.post-attack-discovery-generations-dismiss.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PostAttackDiscoveryGenerationsDismiss","x-api":{"id":"security-attack-discovery-api.post-attack-discovery-generations-dismiss","name":"post-attack-discovery-generations-dismiss","namespace":"security-attack-discovery-api"},"type":"object","properties":{"alerts_context_count":{"type":"number","description":"The number of alerts that were sent as context to the LLM for this generation."},"connector_id":{"type":"string","description":"The unique identifier of the connector used to generate the attack discoveries."},"connector_stats":{"type":"object","properties":{"average_successful_duration_nanoseconds":{"type":"number","description":"The average duration in nanoseconds for successful generations using this connector by the current user."},"successful_generations":{"type":"number","description":"The total number of Attack discoveries successfully created for this generation"}},"description":"Statistical information about the connector's performance for this user, providing insights into usage patterns and success rates."},"discoveries":{"type":"number","description":"The number of attack discoveries that were generated during this execution."},"end":{"type":"string","description":"The timestamp when the generation process completed, in ISO 8601 format. This field may be absent for generations that haven't finished."},"execution_uuid":{"type":"string","description":"The unique identifier for this attack discovery generation execution. This UUID can be used to reference this specific generation in other API calls."},"loading_message":{"type":"string","description":"A human-readable message describing the current state or progress of the generation process. Provides context about what the AI is analyzing."},"reason":{"type":"string","description":"Additional context or reasoning provided when a generation fails or encounters issues. This field helps diagnose problems with the generation process."},"start":{"type":"string","description":"The timestamp when the generation process began, in ISO 8601 format. This marks the beginning of the AI analysis."},"status":{"enum":["canceled","dismissed","failed","started","succeeded"],"description":"The current status of the attack discovery generation. After dismissing, this will be set to \"dismissed\"."}},"required":["connector_id","discoveries","execution_uuid","loading_message","start","status"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-attack-discovery-generations-dismiss","x-api":{"id":"security-attack-discovery-api.post-attack-discovery-generations-dismiss","name":"post-attack-discovery-generations-dismiss","namespace":"security-attack-discovery-api"},"type":"object","properties":{"alerts_context_count":{"type":"number","description":"The number of alerts that were sent as context to the LLM for this generation."},"connector_id":{"type":"string","description":"The unique identifier of the connector used to generate the attack discoveries."},"connector_stats":{"type":"object","properties":{"average_successful_duration_nanoseconds":{"type":"number","description":"The average duration in nanoseconds for successful generations using this connector by the current user."},"successful_generations":{"type":"number","description":"The total number of Attack discoveries successfully created for this generation"}},"description":"Statistical information about the connector's performance for this user, providing insights into usage patterns and success rates."},"discoveries":{"type":"number","description":"The number of attack discoveries that were generated during this execution."},"end":{"type":"string","description":"The timestamp when the generation process completed, in ISO 8601 format. This field may be absent for generations that haven't finished."},"execution_uuid":{"type":"string","description":"The unique identifier for this attack discovery generation execution. This UUID can be used to reference this specific generation in other API calls."},"loading_message":{"type":"string","description":"A human-readable message describing the current state or progress of the generation process. Provides context about what the AI is analyzing."},"reason":{"type":"string","description":"Additional context or reasoning provided when a generation fails or encounters issues. This field helps diagnose problems with the generation process."},"start":{"type":"string","description":"The timestamp when the generation process began, in ISO 8601 format. This marks the beginning of the AI analysis."},"status":{"enum":["canceled","dismissed","failed","started","succeeded"],"description":"The current status of the attack discovery generation. After dismissing, this will be set to \"dismissed\"."}},"required":["connector_id","discoveries","execution_uuid","loading_message","start","status"]}

package/src/kibana/json/security-attack-discovery-api.update-attack-discovery-schedules.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.update-attack-discovery-schedules","name":"update-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"PUT","x-path":"/api/attack_discovery/schedules/{id}","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (UUID) of the Attack Discovery schedule to update. This ID is returned when creating a schedule and can be found in schedule listings.","x-found-in":"path"},"body":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiScheduleUpdateProps","x-found-in":"body","x-body-root":true}},"required":["id"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"update-attack-discovery-schedules","x-api":{"id":"security-attack-discovery-api.update-attack-discovery-schedules","name":"update-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"x-method":"PUT","x-path":"/api/attack_discovery/schedules/{id}","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The unique identifier (UUID) of the Attack Discovery schedule to update. This ID is returned when creating a schedule and can be found in schedule listings.","x-found-in":"path"},"body":{"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiScheduleUpdateProps","x-found-in":"body","x-body-root":true}},"required":["id"]}

package/src/kibana/json/security-attack-discovery-api.update-attack-discovery-schedules.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"UpdateAttackDiscoverySchedules","x-api":{"id":"security-attack-discovery-api.update-attack-discovery-schedules","name":"update-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiSchedule"}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"update-attack-discovery-schedules","x-api":{"id":"security-attack-discovery-api.update-attack-discovery-schedules","name":"update-attack-discovery-schedules","namespace":"security-attack-discovery-api"},"$ref":"./_defs.json#/$defs/Security_Attack_discovery_API_AttackDiscoveryApiSchedule"}

package/src/kibana/json/security-detections-api.create-rule.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"CreateRule","x-api":{"id":"security-detections-api.create-rule","name":"create-rule","namespace":"security-detections-api"},"x-method":"POST","x-path":"/api/detection_engine/rules","x-destructive":false,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleCreateProps","x-found-in":"body","x-body-root":true}}}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"create-rule","x-api":{"id":"security-detections-api.create-rule","name":"create-rule","namespace":"security-detections-api"},"x-method":"POST","x-path":"/api/detection_engine/rules","x-destructive":false,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleCreateProps","x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/security-detections-api.create-rule.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"CreateRule","x-api":{"id":"security-detections-api.create-rule","name":"create-rule","namespace":"security-detections-api"},"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleResponse"}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"create-rule","x-api":{"id":"security-detections-api.create-rule","name":"create-rule","namespace":"security-detections-api"},"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleResponse"}

package/src/kibana/json/security-detections-api.delete-rule.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"DeleteRule","x-api":{"id":"security-detections-api.delete-rule","name":"delete-rule","namespace":"security-detections-api"},"x-method":"DELETE","x-path":"/api/detection_engine/rules","x-destructive":true,"type":"object","properties":{"id":{"$ref":"./_defs.json#/$defs/Security_Detections_API_UUID","description":"The rule's `id` value.","x-found-in":"query"},"rule_id":{"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleSignatureId","description":"The rule's `rule_id` value.","x-found-in":"query"}}}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"delete-rule","x-api":{"id":"security-detections-api.delete-rule","name":"delete-rule","namespace":"security-detections-api"},"x-method":"DELETE","x-path":"/api/detection_engine/rules","x-destructive":true,"type":"object","properties":{"id":{"$ref":"./_defs.json#/$defs/Security_Detections_API_UUID","description":"The rule's `id` value.","x-found-in":"query"},"rule_id":{"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleSignatureId","description":"The rule's `rule_id` value.","x-found-in":"query"}}}

package/src/kibana/json/security-detections-api.delete-rule.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"DeleteRule","x-api":{"id":"security-detections-api.delete-rule","name":"delete-rule","namespace":"security-detections-api"},"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleResponse"}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"delete-rule","x-api":{"id":"security-detections-api.delete-rule","name":"delete-rule","namespace":"security-detections-api"},"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleResponse"}

package/src/kibana/json/security-detections-api.export-rules.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ExportRules","x-api":{"id":"security-detections-api.export-rules","name":"export-rules","namespace":"security-detections-api"},"x-method":"POST","x-path":"/api/detection_engine/rules/_export","x-destructive":true,"x-response-type":["ndjson"],"type":"object","properties":{"exclude_export_details":{"type":"boolean","description":"Determines whether a summary of the exported rules is returned.","x-found-in":"query"},"file_name":{"type":"string","description":"File name for saving the exported rules.\n> info\n> When using cURL to export rules to a file, use the -O and -J options to save the rules to the file name specified in the URL.\n","x-found-in":"query"},"body":{"oneOf":[{"type":"object","properties":{"objects":{"type":"array","items":{"type":"object","properties":{"rule_id":{"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleSignatureId"}},"required":["rule_id"]},"description":"Array of objects with a rule's `rule_id` field. Do not use rule's `id` here. Exports all rules when unspecified."}},"required":["objects"]},{"type":"null"}],"x-found-in":"body","x-body-root":true}}}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"export-rules","x-api":{"id":"security-detections-api.export-rules","name":"export-rules","namespace":"security-detections-api"},"x-method":"POST","x-path":"/api/detection_engine/rules/_export","x-destructive":true,"x-response-type":["ndjson"],"type":"object","properties":{"exclude_export_details":{"type":"boolean","description":"Determines whether a summary of the exported rules is returned.","x-found-in":"query"},"file_name":{"type":"string","description":"File name for saving the exported rules.\n> info\n> When using cURL to export rules to a file, use the -O and -J options to save the rules to the file name specified in the URL.\n","x-found-in":"query"},"body":{"oneOf":[{"type":"object","properties":{"objects":{"type":"array","items":{"type":"object","properties":{"rule_id":{"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleSignatureId"}},"required":["rule_id"]},"description":"Array of objects with a rule's `rule_id` field. Do not use rule's `id` here. Exports all rules when unspecified."}},"required":["objects"]},{"type":"null"}],"x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/security-detections-api.export-rules.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ExportRules","x-api":{"id":"security-detections-api.export-rules","name":"export-rules","namespace":"security-detections-api"},"type":"object","properties":{}}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"export-rules","x-api":{"id":"security-detections-api.export-rules","name":"export-rules","namespace":"security-detections-api"},"type":"object","properties":{}}

package/src/kibana/json/security-detections-api.find-rules.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"FindRules","x-api":{"id":"security-detections-api.find-rules","name":"find-rules","namespace":"security-detections-api"},"x-method":"GET","x-path":"/api/detection_engine/rules/_find","x-destructive":false,"type":"object","properties":{"fields":{"type":"array","items":{"type":"string"},"description":"List of `alert.attributes` field names to return for each rule (for example `name`, `enabled`).\nIf omitted, the default field set is returned. Repeat the parameter to pass multiple field names, or\nuse comma-separated values when supported by your client.\n","x-found-in":"query"},"filter":{"type":"string","description":"Search query\n\nFilters the returned results according to the value of the specified field, using the alert.attributes.<field name>:<field value> syntax, where <field name> can be:\n- name\n- enabled\n- tags\n- createdBy\n- interval\n- updatedBy\n> info\n> Even though the JSON rule object uses created_by and updated_by fields, you must use createdBy and updatedBy fields in the filter.\n","x-found-in":"query"},"sort_field":{"$ref":"./_defs.json#/$defs/Security_Detections_API_FindRulesSortField","description":"Field to sort by","x-found-in":"query"},"sort_order":{"$ref":"./_defs.json#/$defs/Security_Detections_API_SortOrder","description":"Sort order","x-found-in":"query"},"page":{"type":"number","description":"Page number","x-found-in":"query"},"per_page":{"type":"number","description":"Rules per page","x-found-in":"query"},"gaps_range_start":{"type":"string","description":"Gaps range start","x-found-in":"query"},"gaps_range_end":{"type":"string","description":"Gaps range end","x-found-in":"query"},"gap_fill_statuses":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_GapFillStatus"},"description":"Gap fill statuses","x-found-in":"query"},"gap_auto_fill_scheduler_id":{"type":"string","description":"Gap auto fill scheduler ID used to determine gap fill status for rules","x-found-in":"query"}}}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"find-rules","x-api":{"id":"security-detections-api.find-rules","name":"find-rules","namespace":"security-detections-api"},"x-method":"GET","x-path":"/api/detection_engine/rules/_find","x-destructive":false,"type":"object","properties":{"fields":{"type":"array","items":{"type":"string"},"description":"List of `alert.attributes` field names to return for each rule (for example `name`, `enabled`).\nIf omitted, the default field set is returned. Repeat the parameter to pass multiple field names, or\nuse comma-separated values when supported by your client.\n","x-found-in":"query"},"filter":{"type":"string","description":"Search query\n\nFilters the returned results according to the value of the specified field, using the alert.attributes.<field name>:<field value> syntax, where <field name> can be:\n- name\n- enabled\n- tags\n- createdBy\n- interval\n- updatedBy\n> info\n> Even though the JSON rule object uses created_by and updated_by fields, you must use createdBy and updatedBy fields in the filter.\n","x-found-in":"query"},"sort_field":{"$ref":"./_defs.json#/$defs/Security_Detections_API_FindRulesSortField","description":"Field to sort by","x-found-in":"query"},"sort_order":{"$ref":"./_defs.json#/$defs/Security_Detections_API_SortOrder","description":"Sort order","x-found-in":"query"},"page":{"type":"number","description":"Page number","x-found-in":"query"},"per_page":{"type":"number","description":"Rules per page","x-found-in":"query"},"gaps_range_start":{"type":"string","description":"Gaps range start","x-found-in":"query"},"gaps_range_end":{"type":"string","description":"Gaps range end","x-found-in":"query"},"gap_fill_statuses":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_GapFillStatus"},"description":"Gap fill statuses","x-found-in":"query"},"gap_auto_fill_scheduler_id":{"type":"string","description":"Gap auto fill scheduler ID used to determine gap fill status for rules","x-found-in":"query"}}}

package/src/kibana/json/security-detections-api.find-rules.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"FindRules","x-api":{"id":"security-detections-api.find-rules","name":"find-rules","namespace":"security-detections-api"},"type":"object","properties":{"data":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleResponse"}},"page":{"type":"number"},"perPage":{"type":"number"},"total":{"type":"number"},"warnings":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_WarningSchema"}}},"required":["page","perPage","total","data"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"find-rules","x-api":{"id":"security-detections-api.find-rules","name":"find-rules","namespace":"security-detections-api"},"type":"object","properties":{"data":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleResponse"}},"page":{"type":"number"},"perPage":{"type":"number"},"total":{"type":"number"},"warnings":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_WarningSchema"}}},"required":["page","perPage","total","data"]}

package/src/kibana/json/security-detections-api.import-rules.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ImportRules","x-api":{"id":"security-detections-api.import-rules","name":"import-rules","namespace":"security-detections-api"},"x-method":"POST","x-path":"/api/detection_engine/rules/_import","x-destructive":true,"x-body-format":["multipart"],"type":"object","properties":{"overwrite":{"type":"boolean","description":"Determines whether existing rules with the same `rule_id` are overwritten.","x-found-in":"query"},"overwrite_exceptions":{"type":"boolean","description":"Determines whether existing exception lists with the same `list_id` are overwritten. Both the exception list container and its items are overwritten.","x-found-in":"query"},"overwrite_action_connectors":{"type":"boolean","description":"Determines whether existing actions with the same `kibana.alert.rule.actions.id` are overwritten.","x-found-in":"query"},"as_new_list":{"type":"boolean","description":"Generates a new list ID for each imported exception list.","x-found-in":"query"}}}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"import-rules","x-api":{"id":"security-detections-api.import-rules","name":"import-rules","namespace":"security-detections-api"},"x-method":"POST","x-path":"/api/detection_engine/rules/_import","x-destructive":true,"x-body-format":["multipart"],"type":"object","properties":{"overwrite":{"type":"boolean","description":"Determines whether existing rules with the same `rule_id` are overwritten.","x-found-in":"query"},"overwrite_exceptions":{"type":"boolean","description":"Determines whether existing exception lists with the same `list_id` are overwritten. Both the exception list container and its items are overwritten.","x-found-in":"query"},"overwrite_action_connectors":{"type":"boolean","description":"Determines whether existing actions with the same `kibana.alert.rule.actions.id` are overwritten.","x-found-in":"query"},"as_new_list":{"type":"boolean","description":"Generates a new list ID for each imported exception list.","x-found-in":"query"}}}

package/src/kibana/json/security-detections-api.import-rules.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ImportRules","x-api":{"id":"security-detections-api.import-rules","name":"import-rules","namespace":"security-detections-api"},"type":"object","properties":{"action_connectors_errors":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_ErrorSchema"}},"action_connectors_success":{"type":"boolean"},"action_connectors_success_count":{"type":"number"},"action_connectors_warnings":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_WarningSchema"}},"errors":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_ErrorSchema"}},"exceptions_errors":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_ErrorSchema"}},"exceptions_success":{"type":"boolean"},"exceptions_success_count":{"type":"number"},"rules_count":{"type":"number"},"success":{"type":"boolean"},"success_count":{"type":"number"}},"required":["exceptions_success","exceptions_success_count","exceptions_errors","rules_count","success","success_count","errors","action_connectors_errors","action_connectors_warnings","action_connectors_success","action_connectors_success_count"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"import-rules","x-api":{"id":"security-detections-api.import-rules","name":"import-rules","namespace":"security-detections-api"},"type":"object","properties":{"action_connectors_errors":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_ErrorSchema"}},"action_connectors_success":{"type":"boolean"},"action_connectors_success_count":{"type":"number"},"action_connectors_warnings":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_WarningSchema"}},"errors":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_ErrorSchema"}},"exceptions_errors":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_ErrorSchema"}},"exceptions_success":{"type":"boolean"},"exceptions_success_count":{"type":"number"},"rules_count":{"type":"number"},"success":{"type":"boolean"},"success_count":{"type":"number"}},"required":["exceptions_success","exceptions_success_count","exceptions_errors","rules_count","success","success_count","errors","action_connectors_errors","action_connectors_warnings","action_connectors_success","action_connectors_success_count"]}

package/src/kibana/json/security-detections-api.patch-rule.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PatchRule","x-api":{"id":"security-detections-api.patch-rule","name":"patch-rule","namespace":"security-detections-api"},"x-method":"PATCH","x-path":"/api/detection_engine/rules","x-destructive":true,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Detections_API_RulePatchProps","x-found-in":"body","x-body-root":true}}}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"patch-rule","x-api":{"id":"security-detections-api.patch-rule","name":"patch-rule","namespace":"security-detections-api"},"x-method":"PATCH","x-path":"/api/detection_engine/rules","x-destructive":true,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Detections_API_RulePatchProps","x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/security-detections-api.patch-rule.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PatchRule","x-api":{"id":"security-detections-api.patch-rule","name":"patch-rule","namespace":"security-detections-api"},"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleResponse"}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"patch-rule","x-api":{"id":"security-detections-api.patch-rule","name":"patch-rule","namespace":"security-detections-api"},"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleResponse"}

package/src/kibana/json/security-detections-api.perform-rules-bulk-action.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PerformRulesBulkAction","x-api":{"id":"security-detections-api.perform-rules-bulk-action","name":"perform-rules-bulk-action","namespace":"security-detections-api"},"x-method":"POST","x-path":"/api/detection_engine/rules/_bulk_action","x-destructive":true,"type":"object","properties":{"dry_run":{"type":"boolean","description":"Enables dry run mode for the request call.\n\nEnable dry run mode to verify that bulk actions can be applied to specified rules. Certain rules, such as prebuilt Elastic rules on a Basic subscription, can’t be edited and will return errors in the request response. Error details will contain an explanation, the rule name and/or ID, and additional troubleshooting information.\n\nTo enable dry run mode on a request, add the query parameter `dry_run=true` to the end of the request URL. Rules specified in the request will be temporarily updated. These updates won’t be written to Elasticsearch.\n> info\n> Dry run mode is not supported for the `export` bulk action. A 400 error will be returned in the request response.\n","x-found-in":"query"},"action":{"enum":["edit"],"x-found-in":"body"},"gap_auto_fill_scheduler_id":{"type":"string","description":"Gap auto fill scheduler ID used to determine gap fill status for rules","x-found-in":"body"},"gap_fill_statuses":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_GapFillStatus"},"description":"Gap fill statuses to filter rules with gaps by status (used together with gaps_range_*).","x-found-in":"body"},"gaps_range_end":{"type":"string","description":"Gaps range end, valid only when query is provided","x-found-in":"body"},"gaps_range_start":{"type":"string","description":"Gaps range start, valid only when query is provided","x-found-in":"body"},"ids":{"type":"array","items":{"type":"string"},"description":"Array of rule `id`s to which a bulk action will be applied. Do not use rule's `rule_id` here.\nOnly valid when query property is undefined.\n","x-found-in":"body"},"query":{"type":"string","description":"Query to filter rules.","x-found-in":"body"},"duplicate":{"type":"object","properties":{"include_exceptions":{"type":"boolean","description":"Whether to copy exceptions from the original rule"},"include_expired_exceptions":{"type":"boolean","description":"Whether to copy expired exceptions from the original rule"}},"required":["include_exceptions","include_expired_exceptions"],"description":"Duplicate object that describes applying an update action.","x-found-in":"body"},"run":{"type":"object","properties":{"end_date":{"type":"string","description":"End date of the manual rule run"},"start_date":{"type":"string","description":"Start date of the manual rule run"}},"required":["start_date","end_date"],"description":"Object that describes applying a manual rule run action.","x-found-in":"body"},"fill_gaps":{"type":"object","properties":{"end_date":{"type":"string","description":"End date of the manual gap fill"},"start_date":{"type":"string","description":"Start date of the manual gap fill"}},"required":["start_date","end_date"],"description":"Object that describes applying a manual gap fill action for the specified time range.","x-found-in":"body"},"edit":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_BulkActionEditPayload"},"description":"Array of objects containing the edit operations","x-found-in":"body"}},"required":["action"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"perform-rules-bulk-action","x-api":{"id":"security-detections-api.perform-rules-bulk-action","name":"perform-rules-bulk-action","namespace":"security-detections-api"},"x-method":"POST","x-path":"/api/detection_engine/rules/_bulk_action","x-destructive":true,"type":"object","properties":{"dry_run":{"type":"boolean","description":"Enables dry run mode for the request call.\n\nEnable dry run mode to verify that bulk actions can be applied to specified rules. Certain rules, such as prebuilt Elastic rules on a Basic subscription, can’t be edited and will return errors in the request response. Error details will contain an explanation, the rule name and/or ID, and additional troubleshooting information.\n\nTo enable dry run mode on a request, add the query parameter `dry_run=true` to the end of the request URL. Rules specified in the request will be temporarily updated. These updates won’t be written to Elasticsearch.\n> info\n> Dry run mode is not supported for the `export` bulk action. A 400 error will be returned in the request response.\n","x-found-in":"query"},"action":{"enum":["edit"],"x-found-in":"body"},"gap_auto_fill_scheduler_id":{"type":"string","description":"Gap auto fill scheduler ID used to determine gap fill status for rules","x-found-in":"body"},"gap_fill_statuses":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_GapFillStatus"},"description":"Gap fill statuses to filter rules with gaps by status (used together with gaps_range_*).","x-found-in":"body"},"gaps_range_end":{"type":"string","description":"Gaps range end, valid only when query is provided","x-found-in":"body"},"gaps_range_start":{"type":"string","description":"Gaps range start, valid only when query is provided","x-found-in":"body"},"ids":{"type":"array","items":{"type":"string"},"description":"Array of rule `id`s to which a bulk action will be applied. Do not use rule's `rule_id` here.\nOnly valid when query property is undefined.\n","x-found-in":"body"},"query":{"type":"string","description":"Query to filter rules.","x-found-in":"body"},"duplicate":{"type":"object","properties":{"include_exceptions":{"type":"boolean","description":"Whether to copy exceptions from the original rule"},"include_expired_exceptions":{"type":"boolean","description":"Whether to copy expired exceptions from the original rule"}},"required":["include_exceptions","include_expired_exceptions"],"description":"Duplicate object that describes applying an update action.","x-found-in":"body"},"run":{"type":"object","properties":{"end_date":{"type":"string","description":"End date of the manual rule run"},"start_date":{"type":"string","description":"Start date of the manual rule run"}},"required":["start_date","end_date"],"description":"Object that describes applying a manual rule run action.","x-found-in":"body"},"fill_gaps":{"type":"object","properties":{"end_date":{"type":"string","description":"End date of the manual gap fill"},"start_date":{"type":"string","description":"Start date of the manual gap fill"}},"required":["start_date","end_date"],"description":"Object that describes applying a manual gap fill action for the specified time range.","x-found-in":"body"},"edit":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_BulkActionEditPayload"},"description":"Array of objects containing the edit operations","x-found-in":"body"}},"required":["action"]}

package/src/kibana/json/security-detections-api.perform-rules-bulk-action.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PerformRulesBulkAction","x-api":{"id":"security-detections-api.perform-rules-bulk-action","name":"perform-rules-bulk-action","namespace":"security-detections-api"},"oneOf":[{"$ref":"./_defs.json#/$defs/Security_Detections_API_BulkEditActionResponse"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_BulkExportActionResponse"}]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"perform-rules-bulk-action","x-api":{"id":"security-detections-api.perform-rules-bulk-action","name":"perform-rules-bulk-action","namespace":"security-detections-api"},"oneOf":[{"$ref":"./_defs.json#/$defs/Security_Detections_API_BulkEditActionResponse"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_BulkExportActionResponse"}]}

package/src/kibana/json/security-detections-api.read-privileges.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadPrivileges","x-api":{"id":"security-detections-api.read-privileges","name":"read-privileges","namespace":"security-detections-api"},"x-method":"GET","x-path":"/api/detection_engine/privileges","x-destructive":false,"type":"object","properties":{}}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"read-privileges","x-api":{"id":"security-detections-api.read-privileges","name":"read-privileges","namespace":"security-detections-api"},"x-method":"GET","x-path":"/api/detection_engine/privileges","x-destructive":false,"type":"object","properties":{}}

package/src/kibana/json/security-detections-api.read-privileges.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadPrivileges","x-api":{"id":"security-detections-api.read-privileges","name":"read-privileges","namespace":"security-detections-api"},"type":"object","properties":{"has_encryption_key":{"type":"boolean"},"is_authenticated":{"type":"boolean"}},"required":["is_authenticated","has_encryption_key"]}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"read-privileges","x-api":{"id":"security-detections-api.read-privileges","name":"read-privileges","namespace":"security-detections-api"},"type":"object","properties":{"has_encryption_key":{"type":"boolean"},"is_authenticated":{"type":"boolean"}},"required":["is_authenticated","has_encryption_key"]}

package/src/kibana/json/security-detections-api.read-rule.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadRule","x-api":{"id":"security-detections-api.read-rule","name":"read-rule","namespace":"security-detections-api"},"x-method":"GET","x-path":"/api/detection_engine/rules","x-destructive":false,"type":"object","properties":{"id":{"$ref":"./_defs.json#/$defs/Security_Detections_API_UUID","description":"The rule's `id` value.","x-found-in":"query"},"rule_id":{"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleSignatureId","description":"The rule's `rule_id` value.","x-found-in":"query"}}}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"read-rule","x-api":{"id":"security-detections-api.read-rule","name":"read-rule","namespace":"security-detections-api"},"x-method":"GET","x-path":"/api/detection_engine/rules","x-destructive":false,"type":"object","properties":{"id":{"$ref":"./_defs.json#/$defs/Security_Detections_API_UUID","description":"The rule's `id` value.","x-found-in":"query"},"rule_id":{"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleSignatureId","description":"The rule's `rule_id` value.","x-found-in":"query"}}}

package/src/kibana/json/security-detections-api.read-rule.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadRule","x-api":{"id":"security-detections-api.read-rule","name":"read-rule","namespace":"security-detections-api"},"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleResponse"}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"read-rule","x-api":{"id":"security-detections-api.read-rule","name":"read-rule","namespace":"security-detections-api"},"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleResponse"}

package/src/kibana/json/security-detections-api.read-tags.request.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadTags","x-api":{"id":"security-detections-api.read-tags","name":"read-tags","namespace":"security-detections-api"},"x-method":"GET","x-path":"/api/detection_engine/tags","x-destructive":false,"type":"object","properties":{}}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"read-tags","x-api":{"id":"security-detections-api.read-tags","name":"read-tags","namespace":"security-detections-api"},"x-method":"GET","x-path":"/api/detection_engine/tags","x-destructive":false,"type":"object","properties":{}}

package/src/kibana/json/security-detections-api.read-tags.response.json

@@ -1 +1 @@
-{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ReadTags","x-api":{"id":"security-detections-api.read-tags","name":"read-tags","namespace":"security-detections-api"},"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleTagArray"}
+{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"read-tags","x-api":{"id":"security-detections-api.read-tags","name":"read-tags","namespace":"security-detections-api"},"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleTagArray"}