npm - @elastic/schemas - Versions diffs - 0.6.0 → 0.6.2 - Mend

@elastic/schemas 0.6.0 → 0.6.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2215) hide show

package/src/kibana/json/security-endpoint-management-api.endpoint-script-library-patch-update-script.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~EndpointScriptLibraryPatchUpdateScript~~","x-api":{"id":"security-endpoint-management-api.endpoint-script-library-patch-update-script","name":"endpoint-script-library-patch-update-script","namespace":"security-endpoint-management-api"},"x-method":"PATCH","x-path":"/api/endpoint/scripts_library/{script_id}","x-destructive":true,"x-body-format":["multipart"],"type":"object","properties":{"script_id":{"type":"string","description":"The ID of the script entry to be updated.","x-found-in":"path"}},"required":["script_id"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"endpoint-script-library-patch-update-script","x-api":{"id":"security-endpoint-management-api.endpoint-script-library-patch-update-script","name":"endpoint-script-library-patch-update-script","namespace":"security-endpoint-management-api"},"x-method":"PATCH","x-path":"/api/endpoint/scripts_library/{script_id}","x-destructive":true,"x-body-format":["multipart"],"type":"object","properties":{"script_id":{"type":"string","description":"The ID of the script entry to be updated.","x-found-in":"path"}},"required":["script_id"]}

package/src/kibana/json/security-endpoint-management-api.endpoint-script-library-patch-update-script.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~EndpointScriptLibraryPatchUpdateScript~~","x-api":{"id":"security-endpoint-management-api.endpoint-script-library-patch-update-script","name":"endpoint-script-library-patch-update-script","namespace":"security-endpoint-management-api"},"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_ScriptsApiResponse"}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"endpoint-script-library-patch-update-script","x-api":{"id":"security-endpoint-management-api.endpoint-script-library-patch-update-script","name":"endpoint-script-library-patch-update-script","namespace":"security-endpoint-management-api"},"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_ScriptsApiResponse"}

package/src/kibana/json/security-endpoint-management-api.endpoint-suspend-process-action.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~EndpointSuspendProcessAction~~","x-api":{"id":"security-endpoint-management-api.endpoint-suspend-process-action","name":"endpoint-suspend-process-action","namespace":"security-endpoint-management-api"},"x-method":"POST","x-path":"/api/endpoint/action/suspend_process","x-destructive":true,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_SuspendProcessRouteRequestBody","x-found-in":"body","x-body-root":true}}}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"endpoint-suspend-process-action","x-api":{"id":"security-endpoint-management-api.endpoint-suspend-process-action","name":"endpoint-suspend-process-action","namespace":"security-endpoint-management-api"},"x-method":"POST","x-path":"/api/endpoint/action/suspend_process","x-destructive":true,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_SuspendProcessRouteRequestBody","x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/security-endpoint-management-api.endpoint-suspend-process-action.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~EndpointSuspendProcessAction~~","x-api":{"id":"security-endpoint-management-api.endpoint-suspend-process-action","name":"endpoint-suspend-process-action","namespace":"security-endpoint-management-api"},"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_ResponseActionCreateSuccessResponse"}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"endpoint-suspend-process-action","x-api":{"id":"security-endpoint-management-api.endpoint-suspend-process-action","name":"endpoint-suspend-process-action","namespace":"security-endpoint-management-api"},"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_ResponseActionCreateSuccessResponse"}

package/src/kibana/json/security-endpoint-management-api.endpoint-unisolate-action.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~EndpointUnisolateAction~~","x-api":{"id":"security-endpoint-management-api.endpoint-unisolate-action","name":"endpoint-unisolate-action","namespace":"security-endpoint-management-api"},"x-method":"POST","x-path":"/api/endpoint/action/unisolate","x-destructive":true,"type":"object","properties":{"agent_type":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_AgentTypes","x-found-in":"body"},"alert_ids":{"type":"array","items":{"type":"string"},"description":"If this action is associated with any alerts, they can be specified here. The action will be logged in any cases associated with the specified alerts. Max of 50.","x-found-in":"body"},"case_ids":{"type":"array","items":{"type":"string"},"description":"The IDs of cases where the action taken will be logged. Max of 50.","x-found-in":"body"},"comment":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_Comment","x-found-in":"body"},"endpoint_ids":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_EndpointIds","x-found-in":"body"},"parameters":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_Parameters","x-found-in":"body"}},"required":["endpoint_ids"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"endpoint-unisolate-action","x-api":{"id":"security-endpoint-management-api.endpoint-unisolate-action","name":"endpoint-unisolate-action","namespace":"security-endpoint-management-api"},"x-method":"POST","x-path":"/api/endpoint/action/unisolate","x-destructive":true,"type":"object","properties":{"agent_type":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_AgentTypes","x-found-in":"body"},"alert_ids":{"type":"array","items":{"type":"string"},"description":"If this action is associated with any alerts, they can be specified here. The action will be logged in any cases associated with the specified alerts. Max of 50.","x-found-in":"body"},"case_ids":{"type":"array","items":{"type":"string"},"description":"The IDs of cases where the action taken will be logged. Max of 50.","x-found-in":"body"},"comment":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_Comment","x-found-in":"body"},"endpoint_ids":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_EndpointIds","x-found-in":"body"},"parameters":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_Parameters","x-found-in":"body"}},"required":["endpoint_ids"]}

package/src/kibana/json/security-endpoint-management-api.endpoint-unisolate-action.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~EndpointUnisolateAction~~","x-api":{"id":"security-endpoint-management-api.endpoint-unisolate-action","name":"endpoint-unisolate-action","namespace":"security-endpoint-management-api"},"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_UnisolateRouteResponse"}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"endpoint-unisolate-action","x-api":{"id":"security-endpoint-management-api.endpoint-unisolate-action","name":"endpoint-unisolate-action","namespace":"security-endpoint-management-api"},"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_UnisolateRouteResponse"}

package/src/kibana/json/security-endpoint-management-api.endpoint-upload-action.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~EndpointUploadAction~~","x-api":{"id":"security-endpoint-management-api.endpoint-upload-action","name":"endpoint-upload-action","namespace":"security-endpoint-management-api"},"x-method":"POST","x-path":"/api/endpoint/action/upload","x-destructive":true,"x-body-format":["multipart"],"type":"object","properties":{}}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"endpoint-upload-action","x-api":{"id":"security-endpoint-management-api.endpoint-upload-action","name":"endpoint-upload-action","namespace":"security-endpoint-management-api"},"x-method":"POST","x-path":"/api/endpoint/action/upload","x-destructive":true,"x-body-format":["multipart"],"type":"object","properties":{}}

package/src/kibana/json/security-endpoint-management-api.endpoint-upload-action.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~EndpointUploadAction~~","x-api":{"id":"security-endpoint-management-api.endpoint-upload-action","name":"endpoint-upload-action","namespace":"security-endpoint-management-api"},"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_ResponseActionCreateSuccessResponse"}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"endpoint-upload-action","x-api":{"id":"security-endpoint-management-api.endpoint-upload-action","name":"endpoint-upload-action","namespace":"security-endpoint-management-api"},"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_ResponseActionCreateSuccessResponse"}

package/src/kibana/json/security-endpoint-management-api.get-endpoint-metadata-list.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~GetEndpointMetadataList~~","x-api":{"id":"security-endpoint-management-api.get-endpoint-metadata-list","name":"get-endpoint-metadata-list","namespace":"security-endpoint-management-api"},"x-method":"GET","x-path":"/api/endpoint/metadata","x-destructive":false,"type":"object","properties":{"page":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_Page","description":"The page number to return.","x-found-in":"query"},"pageSize":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_PageSize","description":"The number of endpoints to return per page.","x-found-in":"query"},"kuery":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_Kuery","description":"A KQL string to filter the endpoint metadata results.","x-found-in":"query"},"hostStatuses":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_HostStatuses","description":"A set of host statuses to filter the results by (for example, `healthy`, `updating`).","x-found-in":"query"},"sortField":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_SortField","description":"The field used to sort the results.","x-found-in":"query"},"sortDirection":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_SortDirection","description":"The sort order, either `asc` or `desc`.","x-found-in":"query"}},"required":["hostStatuses"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-endpoint-metadata-list","x-api":{"id":"security-endpoint-management-api.get-endpoint-metadata-list","name":"get-endpoint-metadata-list","namespace":"security-endpoint-management-api"},"x-method":"GET","x-path":"/api/endpoint/metadata","x-destructive":false,"type":"object","properties":{"page":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_Page","description":"The page number to return.","x-found-in":"query"},"pageSize":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_PageSize","description":"The number of endpoints to return per page.","x-found-in":"query"},"kuery":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_Kuery","description":"A KQL string to filter the endpoint metadata results.","x-found-in":"query"},"hostStatuses":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_HostStatuses","description":"A set of host statuses to filter the results by (for example, `healthy`, `updating`).","x-found-in":"query"},"sortField":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_SortField","description":"The field used to sort the results.","x-found-in":"query"},"sortDirection":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_SortDirection","description":"The sort order, either `asc` or `desc`.","x-found-in":"query"}},"required":["hostStatuses"]}

package/src/kibana/json/security-endpoint-management-api.get-endpoint-metadata-list.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~GetEndpointMetadataList~~","x-api":{"id":"security-endpoint-management-api.get-endpoint-metadata-list","name":"get-endpoint-metadata-list","namespace":"security-endpoint-management-api"},"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_MetadataListResponse"}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-endpoint-metadata-list","x-api":{"id":"security-endpoint-management-api.get-endpoint-metadata-list","name":"get-endpoint-metadata-list","namespace":"security-endpoint-management-api"},"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_MetadataListResponse"}

package/src/kibana/json/security-endpoint-management-api.get-endpoint-metadata.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~GetEndpointMetadata~~","x-api":{"id":"security-endpoint-management-api.get-endpoint-metadata","name":"get-endpoint-metadata","namespace":"security-endpoint-management-api"},"x-method":"GET","x-path":"/api/endpoint/metadata/{id}","x-destructive":false,"type":"object","properties":{"id":{"type":"string","description":"The agent ID of the endpoint.","x-found-in":"path"}},"required":["id"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-endpoint-metadata","x-api":{"id":"security-endpoint-management-api.get-endpoint-metadata","name":"get-endpoint-metadata","namespace":"security-endpoint-management-api"},"x-method":"GET","x-path":"/api/endpoint/metadata/{id}","x-destructive":false,"type":"object","properties":{"id":{"type":"string","description":"The agent ID of the endpoint.","x-found-in":"path"}},"required":["id"]}

package/src/kibana/json/security-endpoint-management-api.get-endpoint-metadata.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~GetEndpointMetadata~~","x-api":{"id":"security-endpoint-management-api.get-endpoint-metadata","name":"get-endpoint-metadata","namespace":"security-endpoint-management-api"},"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_EndpointMetadataResponse"}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-endpoint-metadata","x-api":{"id":"security-endpoint-management-api.get-endpoint-metadata","name":"get-endpoint-metadata","namespace":"security-endpoint-management-api"},"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_EndpointMetadataResponse"}

package/src/kibana/json/security-endpoint-management-api.get-policy-response.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~GetPolicyResponse~~","x-api":{"id":"security-endpoint-management-api.get-policy-response","name":"get-policy-response","namespace":"security-endpoint-management-api"},"x-method":"GET","x-path":"/api/endpoint/policy_response","x-destructive":false,"type":"object","properties":{"agentId":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_AgentId","description":"The agent ID to retrieve the policy response for.","x-found-in":"query"}},"required":["agentId"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-policy-response","x-api":{"id":"security-endpoint-management-api.get-policy-response","name":"get-policy-response","namespace":"security-endpoint-management-api"},"x-method":"GET","x-path":"/api/endpoint/policy_response","x-destructive":false,"type":"object","properties":{"agentId":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_AgentId","description":"The agent ID to retrieve the policy response for.","x-found-in":"query"}},"required":["agentId"]}

package/src/kibana/json/security-endpoint-management-api.get-policy-response.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~GetPolicyResponse~~","x-api":{"id":"security-endpoint-management-api.get-policy-response","name":"get-policy-response","namespace":"security-endpoint-management-api"},"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_SuccessResponse"}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-policy-response","x-api":{"id":"security-endpoint-management-api.get-policy-response","name":"get-policy-response","namespace":"security-endpoint-management-api"},"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_SuccessResponse"}

package/src/kibana/json/security-endpoint-management-api.get-protection-updates-note.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~GetProtectionUpdatesNote~~","x-api":{"id":"security-endpoint-management-api.get-protection-updates-note","name":"get-protection-updates-note","namespace":"security-endpoint-management-api"},"x-method":"GET","x-path":"/api/endpoint/protection_updates_note/{package_policy_id}","x-destructive":false,"type":"object","properties":{"package_policy_id":{"type":"string","description":"The package policy ID to retrieve the protection updates note for.","x-found-in":"path"}},"required":["package_policy_id"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-protection-updates-note","x-api":{"id":"security-endpoint-management-api.get-protection-updates-note","name":"get-protection-updates-note","namespace":"security-endpoint-management-api"},"x-method":"GET","x-path":"/api/endpoint/protection_updates_note/{package_policy_id}","x-destructive":false,"type":"object","properties":{"package_policy_id":{"type":"string","description":"The package policy ID to retrieve the protection updates note for.","x-found-in":"path"}},"required":["package_policy_id"]}

package/src/kibana/json/security-endpoint-management-api.get-protection-updates-note.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~GetProtectionUpdatesNote~~","x-api":{"id":"security-endpoint-management-api.get-protection-updates-note","name":"get-protection-updates-note","namespace":"security-endpoint-management-api"},"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_ProtectionUpdatesNoteResponse"}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-protection-updates-note","x-api":{"id":"security-endpoint-management-api.get-protection-updates-note","name":"get-protection-updates-note","namespace":"security-endpoint-management-api"},"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_ProtectionUpdatesNoteResponse"}

package/src/kibana/json/security-endpoint-management-api.run-script-action.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~RunScriptAction~~","x-api":{"id":"security-endpoint-management-api.run-script-action","name":"run-script-action","namespace":"security-endpoint-management-api"},"x-method":"POST","x-path":"/api/endpoint/action/run_script","x-destructive":true,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_RunScriptRouteRequestBody","x-found-in":"body","x-body-root":true}}}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"run-script-action","x-api":{"id":"security-endpoint-management-api.run-script-action","name":"run-script-action","namespace":"security-endpoint-management-api"},"x-method":"POST","x-path":"/api/endpoint/action/run_script","x-destructive":true,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_RunScriptRouteRequestBody","x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/security-endpoint-management-api.run-script-action.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~RunScriptAction~~","x-api":{"id":"security-endpoint-management-api.run-script-action","name":"run-script-action","namespace":"security-endpoint-management-api"},"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_ResponseActionCreateSuccessResponse"}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"run-script-action","x-api":{"id":"security-endpoint-management-api.run-script-action","name":"run-script-action","namespace":"security-endpoint-management-api"},"$ref":"./_defs.json#/$defs/Security_Endpoint_Management_API_ResponseActionCreateSuccessResponse"}

package/src/kibana/json/security-entity-analytics-api.apply-entity-engine-dataview-indices.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~ApplyEntityEngineDataviewIndices~~","x-api":{"id":"security-entity-analytics-api.apply-entity-engine-dataview-indices","name":"apply-entity-engine-dataview-indices","namespace":"security-entity-analytics-api"},"x-method":"POST","x-path":"/api/entity_store/engines/apply_dataview_indices","x-destructive":true,"type":"object","properties":{}}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"apply-entity-engine-dataview-indices","x-api":{"id":"security-entity-analytics-api.apply-entity-engine-dataview-indices","name":"apply-entity-engine-dataview-indices","namespace":"security-entity-analytics-api"},"x-method":"POST","x-path":"/api/entity_store/engines/apply_dataview_indices","x-destructive":true,"type":"object","properties":{}}

package/src/kibana/json/security-entity-analytics-api.apply-entity-engine-dataview-indices.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~ApplyEntityEngineDataviewIndices~~","x-api":{"id":"security-entity-analytics-api.apply-entity-engine-dataview-indices","name":"apply-entity-engine-dataview-indices","namespace":"security-entity-analytics-api"},"type":"object","properties":{"result":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EngineDataviewUpdateResult"},"description":"Per-engine update results."},"success":{"type":"boolean","description":"Whether all engines updated successfully."}}}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"apply-entity-engine-dataview-indices","x-api":{"id":"security-entity-analytics-api.apply-entity-engine-dataview-indices","name":"apply-entity-engine-dataview-indices","namespace":"security-entity-analytics-api"},"type":"object","properties":{"result":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EngineDataviewUpdateResult"},"description":"Per-engine update results."},"success":{"type":"boolean","description":"Whether all engines updated successfully."}}}

package/src/kibana/json/security-entity-analytics-api.assign-watchlist-entities.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~AssignWatchlistEntities~~","x-api":{"id":"security-entity-analytics-api.assign-watchlist-entities","name":"assign-watchlist-entities","namespace":"security-entity-analytics-api"},"x-method":"POST","x-path":"/api/entity_analytics/watchlists/{watchlist_id}/entities/assign","x-destructive":true,"x-availability":{"serverless":{"stability":"tech_preview","since":"9.4.0"}},"type":"object","properties":{"watchlist_id":{"type":"string","description":"The ID of the watchlist to add entities to","x-found-in":"path"},"euids":{"type":"array","items":{"type":"string"},"description":"The EUIDs of the entities to assign","x-found-in":"body"}},"required":["watchlist_id","euids"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"assign-watchlist-entities","x-api":{"id":"security-entity-analytics-api.assign-watchlist-entities","name":"assign-watchlist-entities","namespace":"security-entity-analytics-api"},"x-method":"POST","x-path":"/api/entity_analytics/watchlists/{watchlist_id}/entities/assign","x-destructive":true,"x-availability":{"serverless":{"stability":"tech_preview","since":"9.4.0"}},"type":"object","properties":{"watchlist_id":{"type":"string","description":"The ID of the watchlist to add entities to","x-found-in":"path"},"euids":{"type":"array","items":{"type":"string"},"description":"The EUIDs of the entities to assign","x-found-in":"body"}},"required":["watchlist_id","euids"]}

package/src/kibana/json/security-entity-analytics-api.assign-watchlist-entities.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~AssignWatchlistEntities~~","x-api":{"id":"security-entity-analytics-api.assign-watchlist-entities","name":"assign-watchlist-entities","namespace":"security-entity-analytics-api"},"type":"object","properties":{"failed":{"type":"number","description":"Number of entities that failed to process"},"items":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_WatchlistEntityAssignResponseItem"}},"not_found":{"type":"number","description":"Number of entities not found in the entity store"},"successful":{"type":"number","description":"Number of entities successfully assigned"},"total":{"type":"number","description":"Total number of entities processed"}},"required":["successful","failed","not_found","total","items"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"assign-watchlist-entities","x-api":{"id":"security-entity-analytics-api.assign-watchlist-entities","name":"assign-watchlist-entities","namespace":"security-entity-analytics-api"},"type":"object","properties":{"failed":{"type":"number","description":"Number of entities that failed to process"},"items":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_WatchlistEntityAssignResponseItem"}},"not_found":{"type":"number","description":"Number of entities not found in the entity store"},"successful":{"type":"number","description":"Number of entities successfully assigned"},"total":{"type":"number","description":"Total number of entities processed"}},"required":["successful","failed","not_found","total","items"]}

package/src/kibana/json/security-entity-analytics-api.bulk-upsert-asset-criticality-records.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~BulkUpsertAssetCriticalityRecords~~","x-api":{"id":"security-entity-analytics-api.bulk-upsert-asset-criticality-records","name":"bulk-upsert-asset-criticality-records","namespace":"security-entity-analytics-api"},"x-method":"POST","x-path":"/api/asset_criticality/bulk","x-destructive":true,"type":"object","properties":{"records":{"type":"array","items":{"type":"object","properties":{"id_field":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_IdField","description":"The field representing the ID."},"id_value":{"type":"string","description":"The ID value of the asset."},"criticality_level":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityLevelsForBulkUpload"}},"required":["id_value","id_field","criticality_level"]},"x-found-in":"body"}},"required":["records"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"bulk-upsert-asset-criticality-records","x-api":{"id":"security-entity-analytics-api.bulk-upsert-asset-criticality-records","name":"bulk-upsert-asset-criticality-records","namespace":"security-entity-analytics-api"},"x-method":"POST","x-path":"/api/asset_criticality/bulk","x-destructive":true,"type":"object","properties":{"records":{"type":"array","items":{"type":"object","properties":{"id_field":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_IdField","description":"The field representing the ID."},"id_value":{"type":"string","description":"The ID value of the asset."},"criticality_level":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityLevelsForBulkUpload"}},"required":["id_value","id_field","criticality_level"]},"x-found-in":"body"}},"required":["records"]}

package/src/kibana/json/security-entity-analytics-api.bulk-upsert-asset-criticality-records.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~BulkUpsertAssetCriticalityRecords~~","x-api":{"id":"security-entity-analytics-api.bulk-upsert-asset-criticality-records","name":"bulk-upsert-asset-criticality-records","namespace":"security-entity-analytics-api"},"type":"object","properties":{"errors":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityBulkUploadErrorItem"}},"stats":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityBulkUploadStats"}},"required":["errors","stats"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"bulk-upsert-asset-criticality-records","x-api":{"id":"security-entity-analytics-api.bulk-upsert-asset-criticality-records","name":"bulk-upsert-asset-criticality-records","namespace":"security-entity-analytics-api"},"type":"object","properties":{"errors":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityBulkUploadErrorItem"}},"stats":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityBulkUploadStats"}},"required":["errors","stats"]}

package/src/kibana/json/security-entity-analytics-api.clean-up-risk-engine.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~CleanUpRiskEngine~~","x-api":{"id":"security-entity-analytics-api.clean-up-risk-engine","name":"clean-up-risk-engine","namespace":"security-entity-analytics-api"},"x-method":"DELETE","x-path":"/api/risk_score/engine/dangerously_delete_data","x-destructive":true,"type":"object","properties":{}}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"clean-up-risk-engine","x-api":{"id":"security-entity-analytics-api.clean-up-risk-engine","name":"clean-up-risk-engine","namespace":"security-entity-analytics-api"},"x-method":"DELETE","x-path":"/api/risk_score/engine/dangerously_delete_data","x-destructive":true,"type":"object","properties":{}}

package/src/kibana/json/security-entity-analytics-api.clean-up-risk-engine.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~CleanUpRiskEngine~~","x-api":{"id":"security-entity-analytics-api.clean-up-risk-engine","name":"clean-up-risk-engine","namespace":"security-entity-analytics-api"},"type":"object","properties":{"cleanup_successful":{"type":"boolean"}}}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"clean-up-risk-engine","x-api":{"id":"security-entity-analytics-api.clean-up-risk-engine","name":"clean-up-risk-engine","namespace":"security-entity-analytics-api"},"type":"object","properties":{"cleanup_successful":{"type":"boolean"}}}

package/src/kibana/json/security-entity-analytics-api.configure-risk-engine-saved-object.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~ConfigureRiskEngineSavedObject~~","x-api":{"id":"security-entity-analytics-api.configure-risk-engine-saved-object","name":"configure-risk-engine-saved-object","namespace":"security-entity-analytics-api"},"x-method":"PATCH","x-path":"/api/risk_score/engine/saved_object/configure","x-destructive":true,"type":"object","properties":{"enable_reset_to_zero":{"type":"boolean","x-found-in":"body"},"exclude_alert_statuses":{"type":"array","items":{"type":"string"},"x-found-in":"body"},"exclude_alert_tags":{"type":"array","items":{"type":"string"},"x-found-in":"body"},"filters":{"type":"array","items":{"type":"object","properties":{"entity_types":{"type":"array","items":{"enum":["host","user","service"]}},"filter":{"type":"string","description":"KQL filter string"}},"required":["entity_types","filter"]},"x-found-in":"body"},"page_size":{"type":"number","description":"Number of entities to score per page. Higher values reduce total scoring time by reducing the number of alert-index scans, but cannot exceed the ES\|QL result limit (10,000 by default).\n","x-found-in":"body"},"range":{"type":"object","properties":{"end":{"type":"string"},"start":{"type":"string"}},"x-found-in":"body"}}}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"configure-risk-engine-saved-object","x-api":{"id":"security-entity-analytics-api.configure-risk-engine-saved-object","name":"configure-risk-engine-saved-object","namespace":"security-entity-analytics-api"},"x-method":"PATCH","x-path":"/api/risk_score/engine/saved_object/configure","x-destructive":true,"type":"object","properties":{"enable_reset_to_zero":{"type":"boolean","x-found-in":"body"},"exclude_alert_statuses":{"type":"array","items":{"type":"string"},"x-found-in":"body"},"exclude_alert_tags":{"type":"array","items":{"type":"string"},"x-found-in":"body"},"filters":{"type":"array","items":{"type":"object","properties":{"entity_types":{"type":"array","items":{"enum":["host","user","service"]}},"filter":{"type":"string","description":"KQL filter string"}},"required":["entity_types","filter"]},"x-found-in":"body"},"page_size":{"type":"number","description":"Number of entities to score per page. Higher values reduce total scoring time by reducing the number of alert-index scans, but cannot exceed the ES\|QL result limit (10,000 by default).\n","x-found-in":"body"},"range":{"type":"object","properties":{"end":{"type":"string"},"start":{"type":"string"}},"x-found-in":"body"}}}

package/src/kibana/json/security-entity-analytics-api.configure-risk-engine-saved-object.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~ConfigureRiskEngineSavedObject~~","x-api":{"id":"security-entity-analytics-api.configure-risk-engine-saved-object","name":"configure-risk-engine-saved-object","namespace":"security-entity-analytics-api"},"type":"object","properties":{"risk_engine_saved_object_configured":{"type":"boolean"}}}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"configure-risk-engine-saved-object","x-api":{"id":"security-entity-analytics-api.configure-risk-engine-saved-object","name":"configure-risk-engine-saved-object","namespace":"security-entity-analytics-api"},"type":"object","properties":{"risk_engine_saved_object_configured":{"type":"boolean"}}}

package/src/kibana/json/security-entity-analytics-api.create-asset-criticality-record.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~CreateAssetCriticalityRecord~~","x-api":{"id":"security-entity-analytics-api.create-asset-criticality-record","name":"create-asset-criticality-record","namespace":"security-entity-analytics-api"},"x-method":"POST","x-path":"/api/asset_criticality","x-destructive":true,"type":"object","properties":{"id_field":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_IdField","description":"The field representing the ID.","x-found-in":"body"},"id_value":{"type":"string","description":"The ID value of the asset.","x-found-in":"body"},"criticality_level":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityLevel","x-found-in":"body"},"refresh":{"enum":["wait_for"],"description":"If 'wait_for' the request will wait for the index refresh.","x-found-in":"body"}},"required":["id_value","id_field","criticality_level"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"create-asset-criticality-record","x-api":{"id":"security-entity-analytics-api.create-asset-criticality-record","name":"create-asset-criticality-record","namespace":"security-entity-analytics-api"},"x-method":"POST","x-path":"/api/asset_criticality","x-destructive":true,"type":"object","properties":{"id_field":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_IdField","description":"The field representing the ID.","x-found-in":"body"},"id_value":{"type":"string","description":"The ID value of the asset.","x-found-in":"body"},"criticality_level":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityLevel","x-found-in":"body"},"refresh":{"enum":["wait_for"],"description":"If 'wait_for' the request will wait for the index refresh.","x-found-in":"body"}},"required":["id_value","id_field","criticality_level"]}

package/src/kibana/json/security-entity-analytics-api.create-asset-criticality-record.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~CreateAssetCriticalityRecord~~","x-api":{"id":"security-entity-analytics-api.create-asset-criticality-record","name":"create-asset-criticality-record","namespace":"security-entity-analytics-api"},"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityRecord"}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"create-asset-criticality-record","x-api":{"id":"security-entity-analytics-api.create-asset-criticality-record","name":"create-asset-criticality-record","namespace":"security-entity-analytics-api"},"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityRecord"}

package/src/kibana/json/security-entity-analytics-api.create-priv-mon-user.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~CreatePrivMonUser~~","x-api":{"id":"security-entity-analytics-api.create-priv-mon-user","name":"create-priv-mon-user","namespace":"security-entity-analytics-api"},"x-method":"POST","x-path":"/api/entity_analytics/monitoring/users","x-destructive":false,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_UserName","x-found-in":"body","x-body-root":true}}}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"create-priv-mon-user","x-api":{"id":"security-entity-analytics-api.create-priv-mon-user","name":"create-priv-mon-user","namespace":"security-entity-analytics-api"},"x-method":"POST","x-path":"/api/entity_analytics/monitoring/users","x-destructive":false,"type":"object","properties":{"body":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_UserName","x-found-in":"body","x-body-root":true}}}

package/src/kibana/json/security-entity-analytics-api.create-priv-mon-user.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~CreatePrivMonUser~~","x-api":{"id":"security-entity-analytics-api.create-priv-mon-user","name":"create-priv-mon-user","namespace":"security-entity-analytics-api"},"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_MonitoredUserDoc"}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"create-priv-mon-user","x-api":{"id":"security-entity-analytics-api.create-priv-mon-user","name":"create-priv-mon-user","namespace":"security-entity-analytics-api"},"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_MonitoredUserDoc"}

package/src/kibana/json/security-entity-analytics-api.create-watchlist.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~CreateWatchlist~~","x-api":{"id":"security-entity-analytics-api.create-watchlist","name":"create-watchlist","namespace":"security-entity-analytics-api"},"x-method":"POST","x-path":"/api/entity_analytics/watchlists","x-destructive":false,"x-availability":{"serverless":{"stability":"tech_preview"}},"type":"object","properties":{"description":{"type":"string","description":"Description of the watchlist","x-found-in":"body"},"entitySources":{"type":"array","items":{"type":"object","properties":{"enabled":{"type":"boolean"},"filter":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_Filter"},"identifierField":{"type":"string","description":"Field used to query the entity store for index-type sources"},"indexPattern":{"type":"string"},"integrationName":{"type":"string","description":"Required when type is entity_analytics_integration. One of entityanalytics_okta, entityanalytics_ad."},"matchers":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_Matcher"}},"name":{"type":"string"},"queryRule":{"type":"string","description":"KQL query used to filter data from the provided index patterns"},"range":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_DateRange"},"type":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EntitySourceType"}},"required":["type","name"]},"description":"Optional entity sources to create and link to the watchlist","x-found-in":"body"},"managed":{"type":"boolean","description":"Indicates if the watchlist is managed by the system","x-found-in":"body"},"name":{"type":"string","description":"Unique name for the watchlist","x-found-in":"body"},"riskModifier":{"type":"number","description":"Risk score modifier associated with the watchlist","x-found-in":"body"}},"required":["name","riskModifier"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"create-watchlist","x-api":{"id":"security-entity-analytics-api.create-watchlist","name":"create-watchlist","namespace":"security-entity-analytics-api"},"x-method":"POST","x-path":"/api/entity_analytics/watchlists","x-destructive":false,"x-availability":{"serverless":{"stability":"tech_preview"}},"type":"object","properties":{"description":{"type":"string","description":"Description of the watchlist","x-found-in":"body"},"entitySources":{"type":"array","items":{"type":"object","properties":{"enabled":{"type":"boolean"},"filter":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_Filter"},"identifierField":{"type":"string","description":"Field used to query the entity store for index-type sources"},"indexPattern":{"type":"string"},"integrationName":{"type":"string","description":"Required when type is entity_analytics_integration. One of entityanalytics_okta, entityanalytics_ad."},"matchers":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_Matcher"}},"name":{"type":"string"},"queryRule":{"type":"string","description":"KQL query used to filter data from the provided index patterns"},"range":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_DateRange"},"type":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EntitySourceType"}},"required":["type","name"]},"description":"Optional entity sources to create and link to the watchlist","x-found-in":"body"},"managed":{"type":"boolean","description":"Indicates if the watchlist is managed by the system","x-found-in":"body"},"name":{"type":"string","description":"Unique name for the watchlist","x-found-in":"body"},"riskModifier":{"type":"number","description":"Risk score modifier associated with the watchlist","x-found-in":"body"}},"required":["name","riskModifier"]}

package/src/kibana/json/security-entity-analytics-api.create-watchlist.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~CreateWatchlist~~","x-api":{"id":"security-entity-analytics-api.create-watchlist","name":"create-watchlist","namespace":"security-entity-analytics-api"},"type":"object","properties":{"createdAt":{"type":"string","description":"Timestamp indicating when the watchlist was created"},"description":{"type":"string","description":"Description of the watchlist"},"entityCount":{"type":"number","description":"Number of entities in the watchlist"},"entitySourceIds":{"type":"array","items":{"type":"string"},"description":"List of entity source IDs associated with the watchlist"},"id":{"type":"string","description":"The unique ID of the watchlist"},"managed":{"type":"boolean","description":"Indicates if the watchlist is managed by the system"},"name":{"type":"string","description":"The name of the watchlist"},"riskModifier":{"type":"number","description":"Risk score modifier associated with the watchlist"},"updatedAt":{"type":"string","description":"Timestamp indicating when the watchlist was last updated"},"entitySources":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_MonitoringEntitySource"}}},"required":["name","riskModifier","managed"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"create-watchlist","x-api":{"id":"security-entity-analytics-api.create-watchlist","name":"create-watchlist","namespace":"security-entity-analytics-api"},"type":"object","properties":{"createdAt":{"type":"string","description":"Timestamp indicating when the watchlist was created"},"description":{"type":"string","description":"Description of the watchlist"},"entityCount":{"type":"number","description":"Number of entities in the watchlist"},"entitySourceIds":{"type":"array","items":{"type":"string"},"description":"List of entity source IDs associated with the watchlist"},"id":{"type":"string","description":"The unique ID of the watchlist"},"managed":{"type":"boolean","description":"Indicates if the watchlist is managed by the system"},"name":{"type":"string","description":"The name of the watchlist"},"riskModifier":{"type":"number","description":"Risk score modifier associated with the watchlist"},"updatedAt":{"type":"string","description":"Timestamp indicating when the watchlist was last updated"},"entitySources":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_MonitoringEntitySource"}}},"required":["name","riskModifier","managed"]}

package/src/kibana/json/security-entity-analytics-api.delete-asset-criticality-record.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~DeleteAssetCriticalityRecord~~","x-api":{"id":"security-entity-analytics-api.delete-asset-criticality-record","name":"delete-asset-criticality-record","namespace":"security-entity-analytics-api"},"x-method":"DELETE","x-path":"/api/asset_criticality","x-destructive":true,"type":"object","properties":{"id_value":{"type":"string","description":"The ID value of the asset.","x-found-in":"query"},"id_field":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_IdField","description":"The field representing the ID.","x-found-in":"query"},"refresh":{"enum":["wait_for"],"description":"If 'wait_for' the request will wait for the index refresh.","x-found-in":"query"}},"required":["id_value","id_field"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"delete-asset-criticality-record","x-api":{"id":"security-entity-analytics-api.delete-asset-criticality-record","name":"delete-asset-criticality-record","namespace":"security-entity-analytics-api"},"x-method":"DELETE","x-path":"/api/asset_criticality","x-destructive":true,"type":"object","properties":{"id_value":{"type":"string","description":"The ID value of the asset.","x-found-in":"query"},"id_field":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_IdField","description":"The field representing the ID.","x-found-in":"query"},"refresh":{"enum":["wait_for"],"description":"If 'wait_for' the request will wait for the index refresh.","x-found-in":"query"}},"required":["id_value","id_field"]}

package/src/kibana/json/security-entity-analytics-api.delete-asset-criticality-record.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~DeleteAssetCriticalityRecord~~","x-api":{"id":"security-entity-analytics-api.delete-asset-criticality-record","name":"delete-asset-criticality-record","namespace":"security-entity-analytics-api"},"type":"object","properties":{"deleted":{"type":"boolean","description":"True if the record was deleted or false if the record did not exist."},"record":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityRecord","description":"The deleted record if it existed."}},"required":["deleted"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"delete-asset-criticality-record","x-api":{"id":"security-entity-analytics-api.delete-asset-criticality-record","name":"delete-asset-criticality-record","namespace":"security-entity-analytics-api"},"type":"object","properties":{"deleted":{"type":"boolean","description":"True if the record was deleted or false if the record did not exist."},"record":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityRecord","description":"The deleted record if it existed."}},"required":["deleted"]}

package/src/kibana/json/security-entity-analytics-api.delete-entity-engine.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~DeleteEntityEngine~~","x-api":{"id":"security-entity-analytics-api.delete-entity-engine","name":"delete-entity-engine","namespace":"security-entity-analytics-api"},"x-method":"DELETE","x-path":"/api/entity_store/engines/{entityType}","x-destructive":true,"type":"object","properties":{"entityType":{"type":"string","description":"The entity type of the engine (either 'user' or 'host').","x-found-in":"path"},"delete_data":{"type":"boolean","description":"Control flag to also delete the entity data.","x-found-in":"query"},"data":{"type":"boolean","description":"Control flag to also delete the entity data.","x-found-in":"query"}},"required":["entityType"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"delete-entity-engine","x-api":{"id":"security-entity-analytics-api.delete-entity-engine","name":"delete-entity-engine","namespace":"security-entity-analytics-api"},"x-method":"DELETE","x-path":"/api/entity_store/engines/{entityType}","x-destructive":true,"type":"object","properties":{"entityType":{"type":"string","description":"The entity type of the engine (either 'user' or 'host').","x-found-in":"path"},"delete_data":{"type":"boolean","description":"Control flag to also delete the entity data.","x-found-in":"query"},"data":{"type":"boolean","description":"Control flag to also delete the entity data.","x-found-in":"query"}},"required":["entityType"]}

package/src/kibana/json/security-entity-analytics-api.delete-entity-engine.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~DeleteEntityEngine~~","x-api":{"id":"security-entity-analytics-api.delete-entity-engine","name":"delete-entity-engine","namespace":"security-entity-analytics-api"},"type":"object","properties":{"deleted":{"type":"boolean","description":"Whether the engine was successfully deleted."}}}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"delete-entity-engine","x-api":{"id":"security-entity-analytics-api.delete-entity-engine","name":"delete-entity-engine","namespace":"security-entity-analytics-api"},"type":"object","properties":{"deleted":{"type":"boolean","description":"Whether the engine was successfully deleted."}}}

package/src/kibana/json/security-entity-analytics-api.delete-entity-engines.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~DeleteEntityEngines~~","x-api":{"id":"security-entity-analytics-api.delete-entity-engines","name":"delete-entity-engines","namespace":"security-entity-analytics-api"},"x-method":"DELETE","x-path":"/api/entity_store/engines","x-destructive":true,"type":"object","properties":{"entityTypes":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EntityType"},"description":"The entity type of the engine ('user', 'host', 'service', 'generic').","x-found-in":"query"},"delete_data":{"type":"boolean","description":"Control flag to also delete the entity data.","x-found-in":"query"}}}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"delete-entity-engines","x-api":{"id":"security-entity-analytics-api.delete-entity-engines","name":"delete-entity-engines","namespace":"security-entity-analytics-api"},"x-method":"DELETE","x-path":"/api/entity_store/engines","x-destructive":true,"type":"object","properties":{"entityTypes":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EntityType"},"description":"The entity type of the engine ('user', 'host', 'service', 'generic').","x-found-in":"query"},"delete_data":{"type":"boolean","description":"Control flag to also delete the entity data.","x-found-in":"query"}}}

package/src/kibana/json/security-entity-analytics-api.delete-entity-engines.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~DeleteEntityEngines~~","x-api":{"id":"security-entity-analytics-api.delete-entity-engines","name":"delete-entity-engines","namespace":"security-entity-analytics-api"},"type":"object","properties":{"deleted":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EntityType"},"description":"Entity types whose engines were successfully deleted."},"still_running":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EntityType"},"description":"Entity types whose engines are still running."}}}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"delete-entity-engines","x-api":{"id":"security-entity-analytics-api.delete-entity-engines","name":"delete-entity-engines","namespace":"security-entity-analytics-api"},"type":"object","properties":{"deleted":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EntityType"},"description":"Entity types whose engines were successfully deleted."},"still_running":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EntityType"},"description":"Entity types whose engines are still running."}}}

package/src/kibana/json/security-entity-analytics-api.delete-monitoring-engine.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~DeleteMonitoringEngine~~","x-api":{"id":"security-entity-analytics-api.delete-monitoring-engine","name":"delete-monitoring-engine","namespace":"security-entity-analytics-api"},"x-method":"DELETE","x-path":"/api/entity_analytics/monitoring/engine/delete","x-destructive":true,"type":"object","properties":{"data":{"type":"boolean","description":"Whether to delete all the privileged user data","x-found-in":"query"}}}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"delete-monitoring-engine","x-api":{"id":"security-entity-analytics-api.delete-monitoring-engine","name":"delete-monitoring-engine","namespace":"security-entity-analytics-api"},"x-method":"DELETE","x-path":"/api/entity_analytics/monitoring/engine/delete","x-destructive":true,"type":"object","properties":{"data":{"type":"boolean","description":"Whether to delete all the privileged user data","x-found-in":"query"}}}

package/src/kibana/json/security-entity-analytics-api.delete-monitoring-engine.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~DeleteMonitoringEngine~~","x-api":{"id":"security-entity-analytics-api.delete-monitoring-engine","name":"delete-monitoring-engine","namespace":"security-entity-analytics-api"},"type":"object","properties":{"deleted":{"type":"boolean"}},"required":["deleted"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"delete-monitoring-engine","x-api":{"id":"security-entity-analytics-api.delete-monitoring-engine","name":"delete-monitoring-engine","namespace":"security-entity-analytics-api"},"type":"object","properties":{"deleted":{"type":"boolean"}},"required":["deleted"]}

package/src/kibana/json/security-entity-analytics-api.delete-priv-mon-user.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~DeletePrivMonUser~~","x-api":{"id":"security-entity-analytics-api.delete-priv-mon-user","name":"delete-priv-mon-user","namespace":"security-entity-analytics-api"},"x-method":"DELETE","x-path":"/api/entity_analytics/monitoring/users/{id}","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The document ID of the monitored user to delete","x-found-in":"path"}},"required":["id"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"delete-priv-mon-user","x-api":{"id":"security-entity-analytics-api.delete-priv-mon-user","name":"delete-priv-mon-user","namespace":"security-entity-analytics-api"},"x-method":"DELETE","x-path":"/api/entity_analytics/monitoring/users/{id}","x-destructive":true,"type":"object","properties":{"id":{"type":"string","description":"The document ID of the monitored user to delete","x-found-in":"path"}},"required":["id"]}

package/src/kibana/json/security-entity-analytics-api.delete-priv-mon-user.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~DeletePrivMonUser~~","x-api":{"id":"security-entity-analytics-api.delete-priv-mon-user","name":"delete-priv-mon-user","namespace":"security-entity-analytics-api"},"type":"object","properties":{"acknowledged":{"type":"boolean","description":"Indicates if the deletion was successful"},"message":{"type":"string","description":"A message providing additional information about the deletion status"}},"required":["success"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"delete-priv-mon-user","x-api":{"id":"security-entity-analytics-api.delete-priv-mon-user","name":"delete-priv-mon-user","namespace":"security-entity-analytics-api"},"type":"object","properties":{"acknowledged":{"type":"boolean","description":"Indicates if the deletion was successful"},"message":{"type":"string","description":"A message providing additional information about the deletion status"}},"required":["success"]}

package/src/kibana/json/security-entity-analytics-api.delete-single-entity.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~DeleteSingleEntity~~","x-api":{"id":"security-entity-analytics-api.delete-single-entity","name":"delete-single-entity","namespace":"security-entity-analytics-api"},"x-method":"DELETE","x-path":"/api/entity_store/entities/{entityType}","x-destructive":true,"type":"object","properties":{"entityType":{"type":"string","description":"","x-found-in":"path"},"id":{"type":"string","description":"Identifier of the entity to be deleted, commonly entity.id value.","x-found-in":"body"}},"required":["entityType","id"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"delete-single-entity","x-api":{"id":"security-entity-analytics-api.delete-single-entity","name":"delete-single-entity","namespace":"security-entity-analytics-api"},"x-method":"DELETE","x-path":"/api/entity_store/entities/{entityType}","x-destructive":true,"type":"object","properties":{"entityType":{"type":"string","description":"","x-found-in":"path"},"id":{"type":"string","description":"Identifier of the entity to be deleted, commonly entity.id value.","x-found-in":"body"}},"required":["entityType","id"]}

package/src/kibana/json/security-entity-analytics-api.delete-single-entity.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~DeleteSingleEntity~~","x-api":{"id":"security-entity-analytics-api.delete-single-entity","name":"delete-single-entity","namespace":"security-entity-analytics-api"},"type":"object","properties":{"deleted":{"type":"boolean","description":"Whether the entity was successfully deleted."}}}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"delete-single-entity","x-api":{"id":"security-entity-analytics-api.delete-single-entity","name":"delete-single-entity","namespace":"security-entity-analytics-api"},"type":"object","properties":{"deleted":{"type":"boolean","description":"Whether the entity was successfully deleted."}}}

package/src/kibana/json/security-entity-analytics-api.disable-monitoring-engine.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~DisableMonitoringEngine~~","x-api":{"id":"security-entity-analytics-api.disable-monitoring-engine","name":"disable-monitoring-engine","namespace":"security-entity-analytics-api"},"x-method":"POST","x-path":"/api/entity_analytics/monitoring/engine/disable","x-destructive":true,"type":"object","properties":{}}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"disable-monitoring-engine","x-api":{"id":"security-entity-analytics-api.disable-monitoring-engine","name":"disable-monitoring-engine","namespace":"security-entity-analytics-api"},"x-method":"POST","x-path":"/api/entity_analytics/monitoring/engine/disable","x-destructive":true,"type":"object","properties":{}}

package/src/kibana/json/security-entity-analytics-api.disable-monitoring-engine.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~DisableMonitoringEngine~~","x-api":{"id":"security-entity-analytics-api.disable-monitoring-engine","name":"disable-monitoring-engine","namespace":"security-entity-analytics-api"},"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_MonitoringEngineDescriptor"}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"disable-monitoring-engine","x-api":{"id":"security-entity-analytics-api.disable-monitoring-engine","name":"disable-monitoring-engine","namespace":"security-entity-analytics-api"},"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_MonitoringEngineDescriptor"}

package/src/kibana/json/security-entity-analytics-api.find-asset-criticality-records.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~FindAssetCriticalityRecords~~","x-api":{"id":"security-entity-analytics-api.find-asset-criticality-records","name":"find-asset-criticality-records","namespace":"security-entity-analytics-api"},"x-method":"GET","x-path":"/api/asset_criticality/list","x-destructive":false,"type":"object","properties":{"sort_field":{"enum":["id_value","id_field","criticality_level","@timestamp"],"description":"The field to sort by.","x-found-in":"query"},"sort_direction":{"enum":["asc","desc"],"description":"The order to sort by.","x-found-in":"query"},"page":{"type":"number","description":"The page number to return.","x-found-in":"query"},"per_page":{"type":"number","description":"The number of records to return per page.","x-found-in":"query"},"kuery":{"type":"string","description":"The kuery to filter by.","x-found-in":"query"}}}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"find-asset-criticality-records","x-api":{"id":"security-entity-analytics-api.find-asset-criticality-records","name":"find-asset-criticality-records","namespace":"security-entity-analytics-api"},"x-method":"GET","x-path":"/api/asset_criticality/list","x-destructive":false,"type":"object","properties":{"sort_field":{"enum":["id_value","id_field","criticality_level","@timestamp"],"description":"The field to sort by.","x-found-in":"query"},"sort_direction":{"enum":["asc","desc"],"description":"The order to sort by.","x-found-in":"query"},"page":{"type":"number","description":"The page number to return.","x-found-in":"query"},"per_page":{"type":"number","description":"The number of records to return per page.","x-found-in":"query"},"kuery":{"type":"string","description":"The kuery to filter by.","x-found-in":"query"}}}

package/src/kibana/json/security-entity-analytics-api.find-asset-criticality-records.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~FindAssetCriticalityRecords~~","x-api":{"id":"security-entity-analytics-api.find-asset-criticality-records","name":"find-asset-criticality-records","namespace":"security-entity-analytics-api"},"type":"object","properties":{"page":{"type":"number"},"per_page":{"type":"number"},"records":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityRecord"}},"total":{"type":"number"}},"required":["records","page","per_page","total"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"find-asset-criticality-records","x-api":{"id":"security-entity-analytics-api.find-asset-criticality-records","name":"find-asset-criticality-records","namespace":"security-entity-analytics-api"},"type":"object","properties":{"page":{"type":"number"},"per_page":{"type":"number"},"records":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityRecord"}},"total":{"type":"number"}},"required":["records","page","per_page","total"]}

package/src/kibana/json/security-entity-analytics-api.get-asset-criticality-record.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~GetAssetCriticalityRecord~~","x-api":{"id":"security-entity-analytics-api.get-asset-criticality-record","name":"get-asset-criticality-record","namespace":"security-entity-analytics-api"},"x-method":"GET","x-path":"/api/asset_criticality","x-destructive":false,"type":"object","properties":{"id_value":{"type":"string","description":"The ID value of the asset.","x-found-in":"query"},"id_field":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_IdField","description":"The field representing the ID.","x-found-in":"query"}},"required":["id_value","id_field"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-asset-criticality-record","x-api":{"id":"security-entity-analytics-api.get-asset-criticality-record","name":"get-asset-criticality-record","namespace":"security-entity-analytics-api"},"x-method":"GET","x-path":"/api/asset_criticality","x-destructive":false,"type":"object","properties":{"id_value":{"type":"string","description":"The ID value of the asset.","x-found-in":"query"},"id_field":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_IdField","description":"The field representing the ID.","x-found-in":"query"}},"required":["id_value","id_field"]}

package/src/kibana/json/security-entity-analytics-api.get-asset-criticality-record.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~GetAssetCriticalityRecord~~","x-api":{"id":"security-entity-analytics-api.get-asset-criticality-record","name":"get-asset-criticality-record","namespace":"security-entity-analytics-api"},"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityRecord"}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-asset-criticality-record","x-api":{"id":"security-entity-analytics-api.get-asset-criticality-record","name":"get-asset-criticality-record","namespace":"security-entity-analytics-api"},"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityRecord"}

package/src/kibana/json/security-entity-analytics-api.get-entity-engine.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~GetEntityEngine~~","x-api":{"id":"security-entity-analytics-api.get-entity-engine","name":"get-entity-engine","namespace":"security-entity-analytics-api"},"x-method":"GET","x-path":"/api/entity_store/engines/{entityType}","x-destructive":false,"type":"object","properties":{"entityType":{"type":"string","description":"The entity type of the engine.","x-found-in":"path"}},"required":["entityType"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-entity-engine","x-api":{"id":"security-entity-analytics-api.get-entity-engine","name":"get-entity-engine","namespace":"security-entity-analytics-api"},"x-method":"GET","x-path":"/api/entity_store/engines/{entityType}","x-destructive":false,"type":"object","properties":{"entityType":{"type":"string","description":"The entity type of the engine.","x-found-in":"path"}},"required":["entityType"]}

package/src/kibana/json/security-entity-analytics-api.get-entity-engine.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~GetEntityEngine~~","x-api":{"id":"security-entity-analytics-api.get-entity-engine","name":"get-entity-engine","namespace":"security-entity-analytics-api"},"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EngineDescriptor"}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-entity-engine","x-api":{"id":"security-entity-analytics-api.get-entity-engine","name":"get-entity-engine","namespace":"security-entity-analytics-api"},"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EngineDescriptor"}

package/src/kibana/json/security-entity-analytics-api.get-entity-store-status.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~GetEntityStoreStatus~~","x-api":{"id":"security-entity-analytics-api.get-entity-store-status","name":"get-entity-store-status","namespace":"security-entity-analytics-api"},"x-method":"GET","x-path":"/api/entity_store/status","x-destructive":false,"type":"object","properties":{"include_components":{"type":"boolean","description":"If true, returns a detailed status of each engine including all its components.","x-found-in":"query"}}}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-entity-store-status","x-api":{"id":"security-entity-analytics-api.get-entity-store-status","name":"get-entity-store-status","namespace":"security-entity-analytics-api"},"x-method":"GET","x-path":"/api/entity_store/status","x-destructive":false,"type":"object","properties":{"include_components":{"type":"boolean","description":"If true, returns a detailed status of each engine including all its components.","x-found-in":"query"}}}

package/src/kibana/json/security-entity-analytics-api.get-entity-store-status.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~GetEntityStoreStatus~~","x-api":{"id":"security-entity-analytics-api.get-entity-store-status","name":"get-entity-store-status","namespace":"security-entity-analytics-api"},"type":"object","properties":{"engines":{"type":"array","items":{"type":"object","properties":{"delay":{"type":"string","description":"The delay before the transform processes new data, allowing late-arriving documents to be included."},"docsPerSecond":{"type":"number","description":"Throttle value for the number of documents processed per second. Use -1 for no throttle."},"error":{"type":"object","properties":{"action":{"enum":["init"],"description":"The lifecycle action that caused the error."},"message":{"type":"string","description":"A human-readable error message."}},"required":["message","action"],"description":"Present when the engine status is `error`. Describes the failure."},"fieldHistoryLength":{"type":"number","description":"The number of historical values retained per field."},"filter":{"type":"string","description":"An optional Kibana Query Language (KQL) filter applied to source documents before aggregation."},"frequency":{"type":"string","description":"How often the transform runs."},"indexPattern":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_IndexPattern"},"lookbackPeriod":{"type":"string","description":"How far back the transform looks when calculating aggregations."},"status":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EngineStatus"},"timeout":{"type":"string","description":"The timeout for initializing the aggregating transform."},"timestampField":{"type":"string","description":"The field used as the timestamp for source documents."},"type":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EntityType"},"components":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EngineComponentStatus"},"description":"Detailed component-level status. Only included when include_components is true."}},"required":["type","indexPattern","status","fieldHistoryLength"]},"description":"Per-engine status information."},"status":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_StoreStatus","description":"The overall status of the Entity Store."}},"required":["status","engines"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-entity-store-status","x-api":{"id":"security-entity-analytics-api.get-entity-store-status","name":"get-entity-store-status","namespace":"security-entity-analytics-api"},"type":"object","properties":{"engines":{"type":"array","items":{"type":"object","properties":{"delay":{"type":"string","description":"The delay before the transform processes new data, allowing late-arriving documents to be included."},"docsPerSecond":{"type":"number","description":"Throttle value for the number of documents processed per second. Use -1 for no throttle."},"error":{"type":"object","properties":{"action":{"enum":["init"],"description":"The lifecycle action that caused the error."},"message":{"type":"string","description":"A human-readable error message."}},"required":["message","action"],"description":"Present when the engine status is `error`. Describes the failure."},"fieldHistoryLength":{"type":"number","description":"The number of historical values retained per field."},"filter":{"type":"string","description":"An optional Kibana Query Language (KQL) filter applied to source documents before aggregation."},"frequency":{"type":"string","description":"How often the transform runs."},"indexPattern":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_IndexPattern"},"lookbackPeriod":{"type":"string","description":"How far back the transform looks when calculating aggregations."},"status":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EngineStatus"},"timeout":{"type":"string","description":"The timeout for initializing the aggregating transform."},"timestampField":{"type":"string","description":"The field used as the timestamp for source documents."},"type":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EntityType"},"components":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EngineComponentStatus"},"description":"Detailed component-level status. Only included when include_components is true."}},"required":["type","indexPattern","status","fieldHistoryLength"]},"description":"Per-engine status information."},"status":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_StoreStatus","description":"The overall status of the Entity Store."}},"required":["status","engines"]}

package/src/kibana/json/security-entity-analytics-api.get-privileged-access-detection-package-status.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~GetPrivilegedAccessDetectionPackageStatus~~","x-api":{"id":"security-entity-analytics-api.get-privileged-access-detection-package-status","name":"get-privileged-access-detection-package-status","namespace":"security-entity-analytics-api"},"x-method":"GET","x-path":"/api/entity_analytics/privileged_user_monitoring/pad/status","x-destructive":false,"type":"object","properties":{}}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-privileged-access-detection-package-status","x-api":{"id":"security-entity-analytics-api.get-privileged-access-detection-package-status","name":"get-privileged-access-detection-package-status","namespace":"security-entity-analytics-api"},"x-method":"GET","x-path":"/api/entity_analytics/privileged_user_monitoring/pad/status","x-destructive":false,"type":"object","properties":{}}

package/src/kibana/json/security-entity-analytics-api.get-privileged-access-detection-package-status.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~GetPrivilegedAccessDetectionPackageStatus~~","x-api":{"id":"security-entity-analytics-api.get-privileged-access-detection-package-status","name":"get-privileged-access-detection-package-status","namespace":"security-entity-analytics-api"},"type":"object","properties":{"jobs":{"type":"array","items":{"type":"object","properties":{"description":{"type":"string"},"job_id":{"type":"string"},"state":{"enum":["closing","closed","opened","failed","opening"]}},"required":["job_id","state"]}},"ml_module_setup_status":{"enum":["complete","incomplete"]},"package_installation_status":{"enum":["complete","incomplete"]}},"required":["package_installation_status","ml_module_setup_status","jobs"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-privileged-access-detection-package-status","x-api":{"id":"security-entity-analytics-api.get-privileged-access-detection-package-status","name":"get-privileged-access-detection-package-status","namespace":"security-entity-analytics-api"},"type":"object","properties":{"jobs":{"type":"array","items":{"type":"object","properties":{"description":{"type":"string"},"job_id":{"type":"string"},"state":{"enum":["closing","closed","opened","failed","opening"]}},"required":["job_id","state"]}},"ml_module_setup_status":{"enum":["complete","incomplete"]},"package_installation_status":{"enum":["complete","incomplete"]}},"required":["package_installation_status","ml_module_setup_status","jobs"]}

package/src/kibana/json/security-entity-analytics-api.get-risk-score-history.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~GetRiskScoreHistory~~","x-api":{"id":"security-entity-analytics-api.get-risk-score-history","name":"get-risk-score-history","namespace":"security-entity-analytics-api"},"x-method":"GET","x-path":"/api/risk_score/history","x-destructive":false,"type":"object","properties":{"entity_type":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_IdentifierType","description":"The type of entity to retrieve history for.","x-found-in":"query"},"entity_id":{"type":"string","description":"The identifier of the entity to retrieve history for.","x-found-in":"query"},"from":{"type":"string","description":"Start of the time range, in date-math syntax. Defaults to 90 days ago.","x-found-in":"query"},"to":{"type":"string","description":"End of the time range, in date-math syntax. Defaults to now.","x-found-in":"query"},"score_type":{"enum":["base","propagated","resolution"],"description":"Filter entries by the type of score recorded (`base`, `propagated`, or `resolution`).","x-found-in":"query"},"page_size":{"type":"number","description":"Maximum number of history entries to return per request.","x-found-in":"query"}},"required":["entity_type","entity_id"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-risk-score-history","x-api":{"id":"security-entity-analytics-api.get-risk-score-history","name":"get-risk-score-history","namespace":"security-entity-analytics-api"},"x-method":"GET","x-path":"/api/risk_score/history","x-destructive":false,"type":"object","properties":{"entity_type":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_IdentifierType","description":"The type of entity to retrieve history for.","x-found-in":"query"},"entity_id":{"type":"string","description":"The identifier of the entity to retrieve history for.","x-found-in":"query"},"from":{"type":"string","description":"Start of the time range, in date-math syntax. Defaults to 90 days ago.","x-found-in":"query"},"to":{"type":"string","description":"End of the time range, in date-math syntax. Defaults to now.","x-found-in":"query"},"score_type":{"enum":["base","propagated","resolution"],"description":"Filter entries by the type of score recorded (`base`, `propagated`, or `resolution`).","x-found-in":"query"},"page_size":{"type":"number","description":"Maximum number of history entries to return per request.","x-found-in":"query"}},"required":["entity_type","entity_id"]}

package/src/kibana/json/security-entity-analytics-api.get-risk-score-history.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~GetRiskScoreHistory~~","x-api":{"id":"security-entity-analytics-api.get-risk-score-history","name":"get-risk-score-history","namespace":"security-entity-analytics-api"},"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_RiskScoreHistoryResponse"}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-risk-score-history","x-api":{"id":"security-entity-analytics-api.get-risk-score-history","name":"get-risk-score-history","namespace":"security-entity-analytics-api"},"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_RiskScoreHistoryResponse"}

package/src/kibana/json/security-entity-analytics-api.get-watchlist.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~GetWatchlist~~","x-api":{"id":"security-entity-analytics-api.get-watchlist","name":"get-watchlist","namespace":"security-entity-analytics-api"},"x-method":"GET","x-path":"/api/entity_analytics/watchlists/{id}","x-destructive":false,"x-availability":{"serverless":{"stability":"tech_preview"}},"type":"object","properties":{"id":{"type":"string","description":"Unique ID of the watchlist","x-found-in":"path"}},"required":["id"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-watchlist","x-api":{"id":"security-entity-analytics-api.get-watchlist","name":"get-watchlist","namespace":"security-entity-analytics-api"},"x-method":"GET","x-path":"/api/entity_analytics/watchlists/{id}","x-destructive":false,"x-availability":{"serverless":{"stability":"tech_preview"}},"type":"object","properties":{"id":{"type":"string","description":"Unique ID of the watchlist","x-found-in":"path"}},"required":["id"]}

package/src/kibana/json/security-entity-analytics-api.get-watchlist.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~GetWatchlist~~","x-api":{"id":"security-entity-analytics-api.get-watchlist","name":"get-watchlist","namespace":"security-entity-analytics-api"},"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_WatchlistObject"}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-watchlist","x-api":{"id":"security-entity-analytics-api.get-watchlist","name":"get-watchlist","namespace":"security-entity-analytics-api"},"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_WatchlistObject"}

package/src/kibana/json/security-entity-analytics-api.init-entity-engine.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~InitEntityEngine~~","x-api":{"id":"security-entity-analytics-api.init-entity-engine","name":"init-entity-engine","namespace":"security-entity-analytics-api"},"x-method":"POST","x-path":"/api/entity_store/engines/{entityType}/init","x-destructive":true,"type":"object","properties":{"entityType":{"type":"string","description":"The entity type of the engine.","x-found-in":"path"},"delay":{"type":"string","description":"The delay before the transform will run.","x-found-in":"body"},"docsPerSecond":{"type":"number","description":"The number of documents per second to process.","x-found-in":"body"},"enrichPolicyExecutionInterval":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_Interval","x-found-in":"body"},"fieldHistoryLength":{"type":"number","description":"The number of historical values to keep for each field.","x-found-in":"body"},"filter":{"type":"string","x-found-in":"body"},"frequency":{"type":"string","description":"The frequency at which the transform will run.","x-found-in":"body"},"indexPattern":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_IndexPattern","x-found-in":"body"},"lookbackPeriod":{"type":"string","description":"The amount of time the transform looks back to calculate the aggregations.","x-found-in":"body"},"maxPageSearchSize":{"type":"number","description":"The initial page size to use for the composite aggregation of each checkpoint.","x-found-in":"body"},"timeout":{"type":"string","description":"The timeout for initializing the aggregating transform.","x-found-in":"body"},"timestampField":{"type":"string","description":"The field to use as the timestamp for the entity type.","x-found-in":"body"}},"required":["entityType"]}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"init-entity-engine","x-api":{"id":"security-entity-analytics-api.init-entity-engine","name":"init-entity-engine","namespace":"security-entity-analytics-api"},"x-method":"POST","x-path":"/api/entity_store/engines/{entityType}/init","x-destructive":true,"type":"object","properties":{"entityType":{"type":"string","description":"The entity type of the engine.","x-found-in":"path"},"delay":{"type":"string","description":"The delay before the transform will run.","x-found-in":"body"},"docsPerSecond":{"type":"number","description":"The number of documents per second to process.","x-found-in":"body"},"enrichPolicyExecutionInterval":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_Interval","x-found-in":"body"},"fieldHistoryLength":{"type":"number","description":"The number of historical values to keep for each field.","x-found-in":"body"},"filter":{"type":"string","x-found-in":"body"},"frequency":{"type":"string","description":"The frequency at which the transform will run.","x-found-in":"body"},"indexPattern":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_IndexPattern","x-found-in":"body"},"lookbackPeriod":{"type":"string","description":"The amount of time the transform looks back to calculate the aggregations.","x-found-in":"body"},"maxPageSearchSize":{"type":"number","description":"The initial page size to use for the composite aggregation of each checkpoint.","x-found-in":"body"},"timeout":{"type":"string","description":"The timeout for initializing the aggregating transform.","x-found-in":"body"},"timestampField":{"type":"string","description":"The field to use as the timestamp for the entity type.","x-found-in":"body"}},"required":["entityType"]}

package/src/kibana/json/security-entity-analytics-api.init-entity-engine.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~InitEntityEngine~~","x-api":{"id":"security-entity-analytics-api.init-entity-engine","name":"init-entity-engine","namespace":"security-entity-analytics-api"},"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EngineDescriptor"}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"init-entity-engine","x-api":{"id":"security-entity-analytics-api.init-entity-engine","name":"init-entity-engine","namespace":"security-entity-analytics-api"},"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EngineDescriptor"}

package/src/kibana/json/security-entity-analytics-api.init-entity-store.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~InitEntityStore~~","x-api":{"id":"security-entity-analytics-api.init-entity-store","name":"init-entity-store","namespace":"security-entity-analytics-api"},"x-method":"POST","x-path":"/api/entity_store/enable","x-destructive":true,"type":"object","properties":{"delay":{"type":"string","description":"The delay before the transform will run.","x-found-in":"body"},"docsPerSecond":{"type":"number","description":"The number of documents per second to process.","x-found-in":"body"},"enrichPolicyExecutionInterval":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_Interval","x-found-in":"body"},"entityTypes":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EntityType"},"x-found-in":"body"},"fieldHistoryLength":{"type":"number","description":"The number of historical values to keep for each field.","x-found-in":"body"},"filter":{"type":"string","x-found-in":"body"},"frequency":{"type":"string","description":"The frequency at which the transform will run.","x-found-in":"body"},"indexPattern":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_IndexPattern","x-found-in":"body"},"lookbackPeriod":{"type":"string","description":"The amount of time the transform looks back to calculate the aggregations.","x-found-in":"body"},"maxPageSearchSize":{"type":"number","description":"The initial page size to use for the composite aggregation of each checkpoint.","x-found-in":"body"},"timeout":{"type":"string","description":"The timeout for initializing the aggregating transform.","x-found-in":"body"},"timestampField":{"type":"string","description":"The field to use as the timestamp.","x-found-in":"body"}}}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"init-entity-store","x-api":{"id":"security-entity-analytics-api.init-entity-store","name":"init-entity-store","namespace":"security-entity-analytics-api"},"x-method":"POST","x-path":"/api/entity_store/enable","x-destructive":true,"type":"object","properties":{"delay":{"type":"string","description":"The delay before the transform will run.","x-found-in":"body"},"docsPerSecond":{"type":"number","description":"The number of documents per second to process.","x-found-in":"body"},"enrichPolicyExecutionInterval":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_Interval","x-found-in":"body"},"entityTypes":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EntityType"},"x-found-in":"body"},"fieldHistoryLength":{"type":"number","description":"The number of historical values to keep for each field.","x-found-in":"body"},"filter":{"type":"string","x-found-in":"body"},"frequency":{"type":"string","description":"The frequency at which the transform will run.","x-found-in":"body"},"indexPattern":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_IndexPattern","x-found-in":"body"},"lookbackPeriod":{"type":"string","description":"The amount of time the transform looks back to calculate the aggregations.","x-found-in":"body"},"maxPageSearchSize":{"type":"number","description":"The initial page size to use for the composite aggregation of each checkpoint.","x-found-in":"body"},"timeout":{"type":"string","description":"The timeout for initializing the aggregating transform.","x-found-in":"body"},"timestampField":{"type":"string","description":"The field to use as the timestamp.","x-found-in":"body"}}}

package/src/kibana/json/security-entity-analytics-api.init-entity-store.response.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"~~InitEntityStore~~","x-api":{"id":"security-entity-analytics-api.init-entity-store","name":"init-entity-store","namespace":"security-entity-analytics-api"},"type":"object","properties":{"engines":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EngineDescriptor"},"description":"The engine descriptors created during initialization."},"succeeded":{"type":"boolean","description":"Whether the Entity Store was initialized successfully."}}}
1	+ {"$schema":"https://json-schema.org/draft/2020-12/schema","title":"init-entity-store","x-api":{"id":"security-entity-analytics-api.init-entity-store","name":"init-entity-store","namespace":"security-entity-analytics-api"},"type":"object","properties":{"engines":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EngineDescriptor"},"description":"The engine descriptors created during initialization."},"succeeded":{"type":"boolean","description":"Whether the Entity Store was initialized successfully."}}}