@elastic/schemas 0.6.0 → 0.6.2

package/src/kibana/json/get_timeline.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Timeline_API_TimelineResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"GetTimeline"}

package/src/kibana/json/get_timelines.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"only_user_favorite":{"type":"string","description":"If `true`, only Timelines that the current user has marked as favorite are returned.","x-found-in":"query"},"timeline_type":{"type":"string","description":"Restrict results to `default` investigation timelines or `template` timeline templates.","x-found-in":"query"},"sort_field":{"type":"string","description":"Field used to sort the list (`title`, `description`, `updated`, or `created`).","x-found-in":"query"},"sort_order":{"type":"string","description":"Whether to sort the results `ascending` or `descending`","x-found-in":"query"},"page_size":{"type":"string","description":"How many results should returned at once","x-found-in":"query"},"page_index":{"type":"string","description":"How many pages should be skipped","x-found-in":"query"},"search":{"type":"string","description":"Allows to search for timelines by their title","x-found-in":"query"},"status":{"type":"string","description":"Filter by timeline lifecycle state (`active`, `draft`, or `immutable`).","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"GetTimelines"}

package/src/kibana/json/get_timelines.response.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"customTemplateTimelineCount":{"type":"number","description":"The amount of custom Timeline templates in the results"},"defaultTimelineCount":{"type":"number","description":"The amount of `default` type Timelines in the results"},"elasticTemplateTimelineCount":{"type":"number","description":"The amount of Elastic's Timeline templates in the results"},"favoriteCount":{"type":"number","description":"The amount of favorited Timelines"},"templateTimelineCount":{"type":"number","description":"The amount of Timeline templates in the results"},"timeline":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Timeline_API_TimelineResponse"}},"totalCount":{"type":"number","description":"The total amount of results"}},"required":["timeline","totalCount"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"GetTimelines"}

package/src/kibana/json/get_visualization_redirect.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"id":{"type":"string","description":"The id parameter","x-found-in":"path"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-visualization-redirect"}

package/src/kibana/json/get_watchlist.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"id":{"type":"string","description":"Unique ID of the watchlist","x-found-in":"path"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"GetWatchlist"}

package/src/kibana/json/get_watchlist.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_WatchlistObject","$schema":"https://json-schema.org/draft/2020-12/schema","title":"GetWatchlist"}

package/src/kibana/json/get_workflows.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"query":{"type":"string","description":"Free-text search query.","x-found-in":"query"},"size":{"type":"number","description":"Number of results per page.","x-found-in":"query"},"page":{"type":"number","description":"Page number.","x-found-in":"query"},"enabled":{"type":"string","description":"Filter by enabled state.","x-found-in":"query"},"createdBy":{"type":"string","description":"Filter by creator.","x-found-in":"query"},"tags":{"type":"string","description":"Filter by tags.","x-found-in":"query"},"managed":{"type":"string","description":"Filter by managed status. Defaults to \"unmanaged\".","x-found-in":"query"},"sortField":{"type":"string","description":"Field to sort by.","x-found-in":"query"},"sortOrder":{"type":"string","description":"Sort direction.","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-workflows"}

package/src/kibana/json/get_workflows_aggs.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"fields":{"type":"string","description":"Field or fields to aggregate on.","x-found-in":"query"},"managed":{"type":"string","description":"Filter aggregations by managed status.","x-found-in":"query"}},"required":["fields"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-workflows-aggs"}

package/src/kibana/json/get_workflows_executions_executionid.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"executionId":{"type":"string","description":"Workflow execution ID","x-found-in":"path"},"includeInput":{"type":"boolean","description":"Include execution input data.","x-found-in":"query"},"includeOutput":{"type":"boolean","description":"Include execution output data.","x-found-in":"query"}},"required":["executionId"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-workflows-executions-executionid"}

package/src/kibana/json/get_workflows_executions_executionid_children.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"executionId":{"type":"string","description":"Workflow execution ID","x-found-in":"path"}},"required":["executionId"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-workflows-executions-executionid-children"}

package/src/kibana/json/get_workflows_executions_executionid_logs.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"executionId":{"type":"string","description":"Workflow execution ID","x-found-in":"path"},"stepExecutionId":{"type":"string","description":"Filter logs by a specific step execution ID.","x-found-in":"query"},"size":{"type":"number","description":"Number of log entries per page.","x-found-in":"query"},"page":{"type":"number","description":"Page number.","x-found-in":"query"},"sortField":{"type":"string","description":"Field to sort by.","x-found-in":"query"},"sortOrder":{"type":"string","description":"Sort order.","x-found-in":"query"}},"required":["executionId"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-workflows-executions-executionid-logs"}

package/src/kibana/json/get_workflows_executions_executionid_step_stepexecutionid.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"executionId":{"type":"string","description":"Workflow execution ID.","x-found-in":"path"},"stepExecutionId":{"type":"string","description":"Step execution ID.","x-found-in":"path"}},"required":["executionId","stepExecutionId"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-workflows-executions-executionid-step-stepexecutionid"}

package/src/kibana/json/get_workflows_schema.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"loose":{"type":"boolean","description":"When true, returns a permissive schema that allows additional properties. When false, returns a strict schema for full validation.","x-found-in":"query"}},"required":["loose"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-workflows-schema"}

package/src/kibana/json/get_workflows_workflow_id.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"id":{"type":"string","description":"Workflow ID","x-found-in":"path"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-workflows-workflow-id"}

package/src/kibana/json/get_workflows_workflow_workflowid_executions.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"workflowId":{"type":"string","description":"Workflow ID","x-found-in":"path"},"statuses":{"type":"string","description":"Filter by execution status.","x-found-in":"query"},"executionTypes":{"type":"string","description":"Filter by execution type.","x-found-in":"query"},"executedBy":{"type":"string","description":"Filter by the user who triggered the execution.","x-found-in":"query"},"concurrencyGroupKey":{"type":"string","description":"Filter by evaluated concurrency group key.","x-found-in":"query"},"omitStepRuns":{"type":"boolean","description":"Whether to exclude step-level execution data.","x-found-in":"query"},"finishedAfter":{"type":"string","description":"Datemath lower bound for filtering executions by finishedAt (inclusive when parsed).","x-found-in":"query"},"finishedBefore":{"type":"string","description":"Datemath upper bound for filtering executions by finishedAt (inclusive when parsed with roundUp).","x-found-in":"query"},"collapse":{"type":"string","description":"Field to collapse execution results by.","x-found-in":"query"},"sortField":{"type":"string","description":"Field to sort executions by.","x-found-in":"query"},"sortOrder":{"type":"string","description":"Sort order.","x-found-in":"query"},"page":{"type":"number","description":"Page number.","x-found-in":"query"},"size":{"type":"number","description":"Number of results per page.","x-found-in":"query"},"startedAfter":{"type":"string","description":"Datemath lower bound for filtering executions by startedAt (inclusive when parsed).","x-found-in":"query"},"startedBefore":{"type":"string","description":"Datemath upper bound for filtering executions by startedAt (inclusive when parsed with roundUp).","x-found-in":"query"}},"required":["workflowId"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-workflows-workflow-workflowid-executions"}

package/src/kibana/json/get_workflows_workflow_workflowid_executions_steps.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"workflowId":{"type":"string","description":"Workflow ID","x-found-in":"path"},"stepId":{"type":"string","description":"Filter by step ID.","x-found-in":"query"},"includeInput":{"type":"boolean","description":"Include step input data.","x-found-in":"query"},"includeOutput":{"type":"boolean","description":"Include step output data.","x-found-in":"query"},"page":{"type":"number","description":"Page number for pagination.","x-found-in":"query"},"size":{"type":"number","description":"Number of results per page.","x-found-in":"query"},"startedAfter":{"type":"string","description":"Datemath lower bound for filtering step executions by startedAt (inclusive when parsed).","x-found-in":"query"},"startedBefore":{"type":"string","description":"Datemath upper bound for filtering step executions by startedAt (inclusive when parsed with roundUp).","x-found-in":"query"}},"required":["workflowId"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"get-workflows-workflow-workflowid-executions-steps"}

package/src/kibana/json/import_exception_list.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"overwrite":{"type":"boolean","description":"Determines whether existing exception lists with the same `list_id` are overwritten.","x-found-in":"query"},"as_new_list":{"type":"boolean","description":"Determines whether the list being imported will have a new `list_id` generated.","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ImportExceptionList"}

package/src/kibana/json/import_exception_list.response.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"errors":{"$ref":"./_defs.json#/$defs/Security_Exceptions_API_ExceptionListsImportBulkErrorArray"},"success":{"type":"boolean"},"success_count":{"type":"number"},"success_count_exception_list_items":{"type":"number"},"success_count_exception_lists":{"type":"number"},"success_exception_list_items":{"type":"boolean"},"success_exception_lists":{"type":"boolean"}},"required":["errors","success","success_count","success_exception_lists","success_count_exception_lists","success_exception_list_items","success_count_exception_list_items"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ImportExceptionList"}

package/src/kibana/json/import_list_items.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"list_id":{"type":"string","description":"List's id.","x-found-in":"query"},"type":{"type":"string","description":"Type of the importing list.","x-found-in":"query"},"refresh":{"type":"string","description":"Determines when changes made by the request are made visible to search.","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ImportListItems"}

package/src/kibana/json/import_list_items.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Lists_API_List","$schema":"https://json-schema.org/draft/2020-12/schema","title":"ImportListItems"}

package/src/kibana/json/import_rules.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"overwrite":{"type":"boolean","description":"Determines whether existing rules with the same `rule_id` are overwritten.","x-found-in":"query"},"overwrite_exceptions":{"type":"boolean","description":"Determines whether existing exception lists with the same `list_id` are overwritten. Both the exception list container and its items are overwritten.","x-found-in":"query"},"overwrite_action_connectors":{"type":"boolean","description":"Determines whether existing actions with the same `kibana.alert.rule.actions.id` are overwritten.","x-found-in":"query"},"as_new_list":{"type":"boolean","description":"Generates a new list ID for each imported exception list.","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ImportRules"}

package/src/kibana/json/import_rules.response.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"action_connectors_errors":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_ErrorSchema"}},"action_connectors_success":{"type":"boolean"},"action_connectors_success_count":{"type":"number"},"action_connectors_warnings":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_WarningSchema"}},"errors":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_ErrorSchema"}},"exceptions_errors":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_ErrorSchema"}},"exceptions_success":{"type":"boolean"},"exceptions_success_count":{"type":"number"},"rules_count":{"type":"number"},"success":{"type":"boolean"},"success_count":{"type":"number"}},"required":["exceptions_success","exceptions_success_count","exceptions_errors","rules_count","success","success_count","errors","action_connectors_errors","action_connectors_warnings","action_connectors_success","action_connectors_success_count"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ImportRules"}

package/src/kibana/json/import_timelines.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"file":{},"isImmutable":{"enum":["true","false"],"description":"Whether the Timeline should be immutable"}},"required":["file"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ImportTimelines"}

package/src/kibana/json/import_timelines.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Timeline_API_ImportTimelineResult","$schema":"https://json-schema.org/draft/2020-12/schema","title":"ImportTimelines"}

package/src/kibana/json/init_entity_engine.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"entityType":{"type":"string","description":"The entity type of the engine.","x-found-in":"path"}},"required":["entityType"],"allOf":[{"type":"object","properties":{"delay":{"type":"string","description":"The delay before the transform will run."},"docsPerSecond":{"type":"number","description":"The number of documents per second to process."},"enrichPolicyExecutionInterval":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_Interval"},"fieldHistoryLength":{"type":"number","description":"The number of historical values to keep for each field."},"filter":{"type":"string"},"frequency":{"type":"string","description":"The frequency at which the transform will run."},"indexPattern":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_IndexPattern"},"lookbackPeriod":{"type":"string","description":"The amount of time the transform looks back to calculate the aggregations."},"maxPageSearchSize":{"type":"number","description":"The initial page size to use for the composite aggregation of each checkpoint."},"timeout":{"type":"string","description":"The timeout for initializing the aggregating transform."},"timestampField":{"type":"string","description":"The field to use as the timestamp for the entity type."}}}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"InitEntityEngine"}

package/src/kibana/json/init_entity_engine.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EngineDescriptor","$schema":"https://json-schema.org/draft/2020-12/schema","title":"InitEntityEngine"}

package/src/kibana/json/init_entity_store.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"delay":{"type":"string","description":"The delay before the transform will run."},"docsPerSecond":{"type":"number","description":"The number of documents per second to process."},"enrichPolicyExecutionInterval":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_Interval"},"entityTypes":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EntityType"}},"fieldHistoryLength":{"type":"number","description":"The number of historical values to keep for each field."},"filter":{"type":"string"},"frequency":{"type":"string","description":"The frequency at which the transform will run."},"indexPattern":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_IndexPattern"},"lookbackPeriod":{"type":"string","description":"The amount of time the transform looks back to calculate the aggregations."},"maxPageSearchSize":{"type":"number","description":"The initial page size to use for the composite aggregation of each checkpoint."},"timeout":{"type":"string","description":"The timeout for initializing the aggregating transform."},"timestampField":{"type":"string","description":"The field to use as the timestamp."}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"InitEntityStore"}

package/src/kibana/json/init_entity_store.response.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"engines":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EngineDescriptor"},"description":"The engine descriptors created during initialization."},"succeeded":{"type":"boolean","description":"Whether the Entity Store was initialized successfully."}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"InitEntityStore"}

package/src/kibana/json/init_monitoring_engine.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_MonitoringEngineDescriptor","$schema":"https://json-schema.org/draft/2020-12/schema","title":"InitMonitoringEngine"}

package/src/kibana/json/install_prepacked_timelines.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"prepackagedTimelines":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Timeline_API_TimelineSavedToReturnObject"}},"timelinesToInstall":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Timeline_API_ImportTimelines"}},"timelinesToUpdate":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Timeline_API_ImportTimelines"}}},"required":["timelinesToInstall","timelinesToUpdate","prepackagedTimelines"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"InstallPrepackedTimelines"}

package/src/kibana/json/install_prepacked_timelines.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Timeline_API_ImportTimelineResult","$schema":"https://json-schema.org/draft/2020-12/schema","title":"InstallPrepackedTimelines"}

package/src/kibana/json/install_privileged_access_detection_package.response.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"message":{"type":"string"}},"required":["message"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"InstallPrivilegedAccessDetectionPackage"}

package/src/kibana/json/list_entities.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"sort_field":{"type":"string","description":"Field to sort results by.","x-found-in":"query"},"sort_order":{"type":"string","description":"Sort order.","x-found-in":"query"},"page":{"type":"number","description":"Page number to return (1-indexed).","x-found-in":"query"},"per_page":{"type":"number","description":"Number of entities per page.","x-found-in":"query"},"filterQuery":{"type":"string","description":"An ES query to filter by.","x-found-in":"query"},"entity_types":{"type":"string","description":"Entity types to include in the results.","x-found-in":"query"}},"required":["entity_types"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ListEntities"}

package/src/kibana/json/list_entities.response.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"inspect":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_InspectQuery"},"page":{"type":"number","description":"Current page number."},"per_page":{"type":"number","description":"Number of entities per page."},"records":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_Entity"},"description":"The entity records for this page."},"total":{"type":"number","description":"Total number of entities matching the query."}},"required":["records","page","per_page","total"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ListEntities"}

package/src/kibana/json/list_entity_engines.response.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"count":{"type":"number","description":"The total number of entity engines."},"engines":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_EngineDescriptor"},"description":"An array of engine descriptors."}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ListEntityEngines"}

package/src/kibana/json/list_priv_mon_users.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"kql":{"type":"string","description":"KQL query to filter the list of monitored users","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ListPrivMonUsers"}

package/src/kibana/json/list_priv_mon_users.response.json

@@ -1 +0,0 @@
-{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_MonitoredUserDoc"},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ListPrivMonUsers"}

package/src/kibana/json/list_watchlists.response.json

@@ -1 +0,0 @@
-{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Entity_Analytics_API_WatchlistObject"},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"ListWatchlists"}

package/src/kibana/json/ml_sync.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Machine_learning_APIs_mlSync200Response","$schema":"https://json-schema.org/draft/2020-12/schema","title":"mlSync"}

package/src/kibana/json/observability_ai_assistant_chat_complete.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"actions":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Observability_AI_Assistant_API_Function"}},"connectorId":{"type":"string","description":"A unique identifier for the connector."},"conversationId":{"type":"string","description":"A unique identifier for the conversation if you are continuing an existing conversation."},"disableFunctions":{"type":"boolean","description":"Flag indicating whether all function calls should be disabled for the conversation. If true, no calls to functions will be made."},"instructions":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Observability_AI_Assistant_API_Instruction"},"description":"An array of instruction objects, which can be either simple strings or detailed objects."},"messages":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Observability_AI_Assistant_API_Message"},"description":"An array of message objects containing the conversation history."},"persist":{"type":"boolean","description":"Indicates whether the conversation should be saved to storage. If true, the conversation will be saved and will be available in Kibana."},"title":{"type":"string","description":"A title for the conversation."}},"required":["messages","connectorId","persist"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"observability-ai-assistant-chat-complete"}

package/src/kibana/json/observability_ai_assistant_chat_complete.response.json

@@ -1 +0,0 @@
-{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","title":"observability-ai-assistant-chat-complete"}

package/src/kibana/json/osquery_copy_packs.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"id":{"type":"string","description":"The ID of the pack to copy.","x-found-in":"path"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryCopyPacks"}

package/src/kibana/json/osquery_copy_packs.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Osquery_API_CopyPacksResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryCopyPacks"}

package/src/kibana/json/osquery_copy_saved_query.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"id":{"type":"string","description":"The ID of the saved query to copy.","x-found-in":"path"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryCopySavedQuery"}

package/src/kibana/json/osquery_copy_saved_query.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Osquery_API_CopySavedQueryResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryCopySavedQuery"}

package/src/kibana/json/osquery_create_live_query.request.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Osquery_API_CreateLiveQueryRequestBody","$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryCreateLiveQuery"}

package/src/kibana/json/osquery_create_live_query.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Osquery_API_CreateLiveQueryResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryCreateLiveQuery"}

package/src/kibana/json/osquery_create_packs.request.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Osquery_API_CreatePacksRequestBody","$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryCreatePacks"}

package/src/kibana/json/osquery_create_packs.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Osquery_API_CreatePacksResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryCreatePacks"}

package/src/kibana/json/osquery_create_saved_query.request.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Osquery_API_CreateSavedQueryRequestBody","$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryCreateSavedQuery"}

package/src/kibana/json/osquery_create_saved_query.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Osquery_API_CreateSavedQueryResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryCreateSavedQuery"}

package/src/kibana/json/osquery_delete_packs.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"id":{"type":"string","description":"The pack ID.","x-found-in":"path"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryDeletePacks"}

package/src/kibana/json/osquery_delete_packs.response.json

@@ -1 +0,0 @@
-{"type":"object","properties":{},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryDeletePacks"}

package/src/kibana/json/osquery_delete_saved_query.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"id":{"type":"string","description":"The saved query ID.","x-found-in":"path"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryDeleteSavedQuery"}

package/src/kibana/json/osquery_delete_saved_query.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Osquery_API_DefaultSuccessResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryDeleteSavedQuery"}

package/src/kibana/json/osquery_find_live_queries.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"kuery":{"type":"string","description":"A KQL search string to filter live queries.","x-found-in":"query"},"page":{"type":"number","description":"The page number to return.","x-found-in":"query"},"pageSize":{"type":"number","description":"The number of results to return per page.","x-found-in":"query"},"sort":{"type":"string","description":"The field to sort results by.","x-found-in":"query"},"sortOrder":{"type":"string","description":"The sort order.","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryFindLiveQueries"}

package/src/kibana/json/osquery_find_live_queries.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Osquery_API_FindLiveQueryResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryFindLiveQueries"}

package/src/kibana/json/osquery_find_packs.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"page":{"type":"number","description":"The page number to return.","x-found-in":"query"},"pageSize":{"type":"number","description":"The number of results to return per page.","x-found-in":"query"},"sort":{"type":"string","description":"The field to sort results by.","x-found-in":"query"},"sortOrder":{"type":"string","description":"The sort order.","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryFindPacks"}

package/src/kibana/json/osquery_find_packs.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Osquery_API_FindPacksResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryFindPacks"}

package/src/kibana/json/osquery_find_saved_queries.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"page":{"type":"number","description":"The page number to return.","x-found-in":"query"},"pageSize":{"type":"number","description":"The number of results to return per page.","x-found-in":"query"},"sort":{"type":"string","description":"The field to sort results by.","x-found-in":"query"},"sortOrder":{"type":"string","description":"The sort order.","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryFindSavedQueries"}

package/src/kibana/json/osquery_find_saved_queries.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Osquery_API_FindSavedQueryResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryFindSavedQueries"}

package/src/kibana/json/osquery_get_live_query_details.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"id":{"type":"string","description":"The ID of the live query.","x-found-in":"path"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryGetLiveQueryDetails"}

package/src/kibana/json/osquery_get_live_query_details.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Osquery_API_FindLiveQueryDetailsResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryGetLiveQueryDetails"}

package/src/kibana/json/osquery_get_live_query_results.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"id":{"type":"string","description":"The ID of the live query.","x-found-in":"path"},"actionId":{"type":"string","description":"The ID of the query action.","x-found-in":"path"},"kuery":{"type":"string","description":"A KQL search string to filter results.","x-found-in":"query"},"page":{"type":"number","description":"The page number to return.","x-found-in":"query"},"pageSize":{"type":"number","description":"The number of results to return per page.","x-found-in":"query"},"sort":{"type":"string","description":"The field to sort results by.","x-found-in":"query"},"sortOrder":{"type":"string","description":"The sort order.","x-found-in":"query"}},"required":["id","actionId"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryGetLiveQueryResults"}

package/src/kibana/json/osquery_get_live_query_results.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Osquery_API_GetLiveQueryResultsResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryGetLiveQueryResults"}

package/src/kibana/json/osquery_get_packs_details.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"id":{"type":"string","description":"The pack ID.","x-found-in":"path"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryGetPacksDetails"}

package/src/kibana/json/osquery_get_packs_details.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Osquery_API_FindPackResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryGetPacksDetails"}

package/src/kibana/json/osquery_get_saved_query_details.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"id":{"type":"string","description":"The saved query ID.","x-found-in":"path"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryGetSavedQueryDetails"}

package/src/kibana/json/osquery_get_saved_query_details.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Osquery_API_FindSavedQueryDetailResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryGetSavedQueryDetails"}

package/src/kibana/json/osquery_get_scheduled_action_results.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"scheduleId":{"type":"string","description":"The schedule ID of the scheduled query.","x-found-in":"path"},"executionCount":{"type":"number","description":"The execution count for this scheduled query run.","x-found-in":"path"},"kuery":{"type":"string","description":"The kuery to filter the results by.","x-found-in":"query"},"page":{"type":"number","description":"The page number to return. The default is 1.","x-found-in":"query"},"pageSize":{"type":"number","description":"The number of results to return per page. The default is 20.","x-found-in":"query"},"sort":{"type":"string","description":"The field that is used to sort the results.","x-found-in":"query"},"sortOrder":{"type":"string","description":"Specifies the sort order.","x-found-in":"query"}},"required":["scheduleId","executionCount"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryGetScheduledActionResults"}

package/src/kibana/json/osquery_get_scheduled_action_results.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Osquery_API_GetScheduledActionResultsResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryGetScheduledActionResults"}

package/src/kibana/json/osquery_get_scheduled_query_results.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"scheduleId":{"type":"string","description":"The schedule ID of the scheduled query.","x-found-in":"path"},"executionCount":{"type":"number","description":"The execution count for this scheduled query run.","x-found-in":"path"},"kuery":{"type":"string","description":"The kuery to filter the results by.","x-found-in":"query"},"page":{"type":"number","description":"The page number to return. The default is 1.","x-found-in":"query"},"pageSize":{"type":"number","description":"The number of results to return per page. The default is 20.","x-found-in":"query"},"sort":{"type":"string","description":"The field that is used to sort the results.","x-found-in":"query"},"sortOrder":{"type":"string","description":"Specifies the sort order.","x-found-in":"query"},"startDate":{"type":"string","description":"The start date filter (ISO 8601) to narrow down results.","x-found-in":"query"}},"required":["scheduleId","executionCount"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryGetScheduledQueryResults"}

package/src/kibana/json/osquery_get_scheduled_query_results.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Osquery_API_GetScheduledQueryResultsResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryGetScheduledQueryResults"}

package/src/kibana/json/osquery_get_unified_history.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"pageSize":{"type":"number","description":"The number of results to return per page.","x-found-in":"query"},"nextPage":{"type":"string","description":"A base64-encoded cursor for pagination. Use the value from the previous response to fetch the next page.","x-found-in":"query"},"kuery":{"type":"string","description":"A search string to filter history entries by pack name, query text, or query ID.","x-found-in":"query"},"userIds":{"type":"string","description":"Comma-separated list of user IDs to filter live query history.","x-found-in":"query"},"sourceFilters":{"type":"string","description":"Comma-separated list of source types to include. Valid values are `live`, `rule`, and `scheduled`.","x-found-in":"query"},"startDate":{"type":"string","description":"The start of the time range filter (ISO 8601).","x-found-in":"query"},"endDate":{"type":"string","description":"The end of the time range filter (ISO 8601).","x-found-in":"query"}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryGetUnifiedHistory"}

package/src/kibana/json/osquery_get_unified_history.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Osquery_API_GetUnifiedHistoryResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryGetUnifiedHistory"}

package/src/kibana/json/osquery_update_packs.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"id":{"type":"string","description":"The pack ID.","x-found-in":"path"}},"required":["id"],"allOf":[{"$ref":"./_defs.json#/$defs/Security_Osquery_API_UpdatePacksRequestBody"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryUpdatePacks"}

package/src/kibana/json/osquery_update_packs.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Osquery_API_UpdatePacksResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryUpdatePacks"}

package/src/kibana/json/osquery_update_saved_query.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"id":{"type":"string","description":"The saved query ID.","x-found-in":"path"}},"required":["id"],"allOf":[{"$ref":"./_defs.json#/$defs/Security_Osquery_API_UpdateSavedQueryRequestBody"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryUpdateSavedQuery"}

package/src/kibana/json/osquery_update_saved_query.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Osquery_API_UpdateSavedQueryResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"OsqueryUpdateSavedQuery"}

package/src/kibana/json/patch_agent_builder_conversations_conversation_id_attachments_attachment_id.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"conversation_id":{"type":"string","description":"The unique identifier of the conversation.","x-found-in":"path"},"attachment_id":{"type":"string","description":"The unique identifier of the attachment to rename.","x-found-in":"path"}},"required":["conversation_id","attachment_id"],"allOf":[{"type":"object","properties":{"description":{"type":"string","description":"The new description/name for the attachment."}},"required":["description"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"patch-agent-builder-conversations-conversation-id-attachments-attachment-id"}

package/src/kibana/json/patch_list.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"_version":{"$ref":"./_defs.json#/$defs/Security_Lists_API_ListVersionId"},"description":{"$ref":"./_defs.json#/$defs/Security_Lists_API_ListDescription"},"id":{"$ref":"./_defs.json#/$defs/Security_Lists_API_ListId"},"meta":{"$ref":"./_defs.json#/$defs/Security_Lists_API_ListMetadata"},"name":{"$ref":"./_defs.json#/$defs/Security_Lists_API_ListName"},"version":{"$ref":"./_defs.json#/$defs/Security_Lists_API_ListVersion"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PatchList"}

package/src/kibana/json/patch_list.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Lists_API_List","$schema":"https://json-schema.org/draft/2020-12/schema","title":"PatchList"}

package/src/kibana/json/patch_list_item.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"_version":{"$ref":"./_defs.json#/$defs/Security_Lists_API_ListVersionId"},"id":{"$ref":"./_defs.json#/$defs/Security_Lists_API_ListItemId"},"meta":{"$ref":"./_defs.json#/$defs/Security_Lists_API_ListItemMetadata"},"refresh":{"enum":["true","false","wait_for"],"description":"Determines when changes made by the request are made visible to search."},"value":{"$ref":"./_defs.json#/$defs/Security_Lists_API_ListItemValue"}},"required":["id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PatchListItem"}

package/src/kibana/json/patch_list_item.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Lists_API_ListItem","$schema":"https://json-schema.org/draft/2020-12/schema","title":"PatchListItem"}

package/src/kibana/json/patch_maintenance_window_id.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"id":{"type":"string","description":"The identifier for the maintenance window.","x-found-in":"path"}},"required":["id"],"allOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_update_maintenance_window"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"patch-maintenance-window-id"}

package/src/kibana/json/patch_maintenance_window_id.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_maintenance_window_response","$schema":"https://json-schema.org/draft/2020-12/schema","title":"patch-maintenance-window-id"}

package/src/kibana/json/patch_rule.request.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Detections_API_RulePatchProps","$schema":"https://json-schema.org/draft/2020-12/schema","title":"PatchRule"}

package/src/kibana/json/patch_rule.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Detections_API_RuleResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"PatchRule"}

package/src/kibana/json/patch_timeline.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"timeline":{"$ref":"./_defs.json#/$defs/Security_Timeline_API_SavedTimeline","description":"The timeline object of the Timeline or Timeline template that you’re updating."},"timelineId":{"oneOf":[{"type":"string"},{"type":"null"}],"description":"The `savedObjectId` of the Timeline or Timeline template that you’re updating."},"version":{"oneOf":[{"type":"string"},{"type":"null"}],"description":"The version of the Timeline or Timeline template that you’re updating."}},"required":["timelineId","version","timeline"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PatchTimeline"}

package/src/kibana/json/patch_timeline.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Timeline_API_TimelineResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"PatchTimeline"}

package/src/kibana/json/perform_anonymization_fields_bulk_action.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"create":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_AnonymizationFieldCreateProps"},"description":"Array of anonymization fields to create."},"delete":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"},"description":"Array of IDs to apply the action to."},"query":{"type":"string","description":"Query to filter the bulk action."}},"description":"Object containing the query to filter anonymization fields and/or an array of anonymization field IDs to delete."},"update":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_AnonymizationFieldUpdateProps"},"description":"Array of anonymization fields to update."}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PerformAnonymizationFieldsBulkAction"}

package/src/kibana/json/perform_anonymization_fields_bulk_action.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_AnonymizationFieldsBulkCrudActionResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"PerformAnonymizationFieldsBulkAction"}

package/src/kibana/json/perform_knowledge_base_entry_bulk_action.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"create":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseEntryCreateProps"},"description":"List of Knowledge Base Entries to create."},"delete":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"},"description":"Array of Knowledge Base Entry IDs."},"query":{"type":"string","description":"Query to filter Knowledge Base Entries."}}},"update":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseEntryUpdateProps"},"description":"List of Knowledge Base Entries to update."}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PerformKnowledgeBaseEntryBulkAction"}

package/src/kibana/json/perform_knowledge_base_entry_bulk_action.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_KnowledgeBaseEntryBulkCrudActionResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"PerformKnowledgeBaseEntryBulkAction"}

package/src/kibana/json/perform_prompts_bulk_action.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"create":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_PromptCreateProps"},"description":"List of prompts to be created."},"delete":{"type":"object","properties":{"ids":{"type":"array","items":{"type":"string"},"description":"Array of IDs to apply the action to."},"query":{"type":"string","description":"Query to filter the bulk action."}},"description":"Criteria for deleting prompts in bulk."},"update":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_PromptUpdateProps"},"description":"List of prompts to be updated."}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PerformPromptsBulkAction"}

package/src/kibana/json/perform_prompts_bulk_action.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_AI_Assistant_API_PromptsBulkCrudActionResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"PerformPromptsBulkAction"}

package/src/kibana/json/perform_rules_bulk_action.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"dry_run":{"type":"boolean","description":"Enables dry run mode for the request call.","x-found-in":"query"}},"allOf":[{"type":"object","properties":{"action":{"enum":["edit"]},"gap_auto_fill_scheduler_id":{"type":"string","description":"Gap auto fill scheduler ID used to determine gap fill status for rules"},"gap_fill_statuses":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_GapFillStatus"},"description":"Gap fill statuses to filter rules with gaps by status (used together with gaps_range_*)."},"gaps_range_end":{"type":"string","description":"Gaps range end, valid only when query is provided"},"gaps_range_start":{"type":"string","description":"Gaps range start, valid only when query is provided"},"ids":{"type":"array","items":{"type":"string"},"description":"Array of rule `id`s to which a bulk action will be applied. Do not use rule's `rule_id` here.\nOnly valid when query property is undefined.\n"},"query":{"type":"string","description":"Query to filter rules."},"duplicate":{"type":"object","properties":{"include_exceptions":{"type":"boolean","description":"Whether to copy exceptions from the original rule"},"include_expired_exceptions":{"type":"boolean","description":"Whether to copy expired exceptions from the original rule"}},"required":["include_exceptions","include_expired_exceptions"],"description":"Duplicate object that describes applying an update action."},"run":{"type":"object","properties":{"end_date":{"type":"string","description":"End date of the manual rule run"},"start_date":{"type":"string","description":"Start date of the manual rule run"}},"required":["start_date","end_date"],"description":"Object that describes applying a manual rule run action."},"fill_gaps":{"type":"object","properties":{"end_date":{"type":"string","description":"End date of the manual gap fill"},"start_date":{"type":"string","description":"Start date of the manual gap fill"}},"required":["start_date","end_date"],"description":"Object that describes applying a manual gap fill action for the specified time range."},"edit":{"type":"array","items":{"$ref":"./_defs.json#/$defs/Security_Detections_API_BulkActionEditPayload"},"description":"Array of objects containing the edit operations"}},"required":["action"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PerformRulesBulkAction"}

package/src/kibana/json/perform_rules_bulk_action.response.json

@@ -1 +0,0 @@
-{"oneOf":[{"$ref":"./_defs.json#/$defs/Security_Detections_API_BulkEditActionResponse"},{"$ref":"./_defs.json#/$defs/Security_Detections_API_BulkExportActionResponse"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PerformRulesBulkAction"}

package/src/kibana/json/persist_favorite_route.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"templateTimelineId":{"oneOf":[{"type":"string"},{"type":"null"}]},"templateTimelineVersion":{"oneOf":[{"type":"number"},{"type":"null"}]},"timelineId":{"oneOf":[{"type":"string"},{"type":"null"}]},"timelineType":{"$ref":"./_defs.json#/$defs/Security_Timeline_API_TimelineType"}},"required":["timelineId","templateTimelineId","templateTimelineVersion","timelineType"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PersistFavoriteRoute"}

package/src/kibana/json/persist_favorite_route.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Timeline_API_FavoriteTimelineResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"PersistFavoriteRoute"}

package/src/kibana/json/persist_note_route.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"note":{"$ref":"./_defs.json#/$defs/Security_Timeline_API_BareNote","description":"Note payload (timeline, text, optional event linkage, metadata)."},"noteId":{"oneOf":[{"type":"string"},{"type":"null"}],"description":"The `savedObjectId` of the note to update. Omit when creating a new note."},"version":{"oneOf":[{"type":"string"},{"type":"null"}],"description":"Saved object version string from a previous read; optional on update."}},"required":["note"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PersistNoteRoute"}

package/src/kibana/json/persist_note_route.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Timeline_API_ResponseNote","$schema":"https://json-schema.org/draft/2020-12/schema","title":"PersistNoteRoute"}

package/src/kibana/json/persist_pinned_event_route.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"eventId":{"type":"string","description":"The `_id` of the associated event for this pinned event."},"pinnedEventId":{"oneOf":[{"type":"string"},{"type":"null"}],"description":"The `savedObjectId` of the pinned event you want to unpin."},"timelineId":{"type":"string","description":"The `savedObjectId` of the timeline that you want this pinned event unpinned from."}},"required":["eventId","timelineId"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"PersistPinnedEventRoute"}

package/src/kibana/json/persist_pinned_event_route.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Security_Timeline_API_PersistPinnedEventResponse","$schema":"https://json-schema.org/draft/2020-12/schema","title":"PersistPinnedEventRoute"}

package/src/kibana/json/post_actions_connector_id.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"id":{"type":"string","description":"An identifier for the connector.","x-found-in":"path"}},"required":["id"],"allOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_new_connector"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-actions-connector-id"}

package/src/kibana/json/post_actions_connector_id.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_connector_response","$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-actions-connector-id"}

package/src/kibana/json/post_actions_connector_id_execute.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"id":{"type":"string","description":"An identifier for the connector.","x-found-in":"path"}},"required":["id"],"allOf":[{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_connector_execute_request"}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-actions-connector-id-execute"}

package/src/kibana/json/post_actions_connector_id_execute.response.json

@@ -1 +0,0 @@
-{"$ref":"./_defs.json#/$defs/Kibana_HTTP_APIs_connector_response","$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-actions-connector-id-execute"}

package/src/kibana/json/post_agent_builder_a2a_agentid.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"agentId":{"type":"string","description":"The unique identifier of the agent to send the A2A task to.","x-found-in":"path"}},"required":["agentId"],"allOf":[{}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-agent-builder-a2a-agentid"}

package/src/kibana/json/post_agent_builder_agents.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"avatar_color":{"type":"string","description":"Optional hex color code for the agent avatar."},"avatar_symbol":{"type":"string","description":"Optional symbol/initials for the agent avatar."},"configuration":{"type":"object","properties":{"connector_ids":{"type":"array","items":{"type":"string"},"description":"Array of connector IDs to associate with the agent."},"enable_elastic_capabilities":{"type":"boolean","description":"When true, enables built-in Elastic capabilities for the agent."},"instructions":{"type":"string","description":"Optional system instructions that define the agent behavior."},"plugin_ids":{"type":"array","items":{"type":"string"},"description":"Array of plugin IDs to assign to the agent."},"skill_ids":{"type":"array","items":{"type":"string"},"description":"Array of skill IDs to be available to the agent."},"tools":{"type":"array","items":{"type":"object","properties":{"tool_ids":{"type":"array","items":{"type":"string"},"description":"Array of tool IDs that the agent can use."}},"required":["tool_ids"]}},"workflow_ids":{"type":"array","items":{"type":"string"}}},"required":["tools"],"description":"Configuration settings for the agent."},"description":{"type":"string","description":"Description of what the agent does."},"id":{"type":"string","description":"Unique identifier for the agent."},"labels":{"type":"array","items":{"type":"string"},"description":"Optional labels for categorizing and organizing agents."},"name":{"type":"string","description":"Display name for the agent."},"visibility":{"enum":["public","shared","private"],"description":"**Technical Preview; added in 9.4.0.** Optional visibility setting: `public` (any privileged user can read/write), `shared` (any privileged user can read, only owner can write), `private` (only owner can read/write)."}},"required":["id","name","description","configuration"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-agent-builder-agents"}

package/src/kibana/json/post_agent_builder_agents_agent_id_consumption.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"agent_id":{"type":"string","description":"The unique identifier of the agent.","x-found-in":"path"}},"required":["agent_id"],"allOf":[{"type":"object","properties":{"has_warnings":{"type":"boolean","description":"Filter to conversations with or without high-token warnings."},"search":{"type":"string","description":"Free-text search filter on conversation title."},"search_after":{"type":"array","items":{},"description":"Cursor for pagination. Pass the search_after value from the previous response."},"size":{"type":"number","description":"Number of results per page."},"sort_field":{"enum":["updated_at","total_tokens","round_count"],"description":"Field to sort results by."},"sort_order":{"enum":["asc","desc"],"description":"Sort direction."},"usernames":{"type":"array","items":{"type":"string"},"description":"Filter results to conversations by these usernames."}}}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-agent-builder-agents-agent-id-consumption"}

package/src/kibana/json/post_agent_builder_conversations_conversation_id_attachments.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"conversation_id":{"type":"string","description":"The unique identifier of the conversation.","x-found-in":"path"}},"required":["conversation_id"],"allOf":[{"type":"object","properties":{"data":{"description":"The attachment data/content. Required unless origin is provided."},"description":{"type":"string","description":"Human-readable description of the attachment."},"hidden":{"type":"boolean","description":"Whether the attachment should be hidden from the user."},"id":{"type":"string","description":"Optional custom ID for the attachment."},"origin":{"type":"string","description":"Origin string (for example, saved object ID) for by-reference attachments. When provided without data, the content is resolved once at creation time."},"type":{"type":"string","description":"The type of the attachment (e.g., text, esql, visualization)."}},"required":["type","data"]}],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-agent-builder-conversations-conversation-id-attachments"}

package/src/kibana/json/post_agent_builder_conversations_conversation_id_attachments_attachment_id_restore.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"conversation_id":{"type":"string","description":"The unique identifier of the conversation.","x-found-in":"path"},"attachment_id":{"type":"string","description":"The unique identifier of the attachment to restore.","x-found-in":"path"}},"required":["conversation_id","attachment_id"],"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-agent-builder-conversations-conversation-id-attachments-attachment-id-restore"}

package/src/kibana/json/post_agent_builder_converse.request.json

@@ -1 +0,0 @@
-{"type":"object","properties":{"_execution_mode":{"enum":["local","task_manager"],"description":"**Experimental; added in 9.4.0.** define how to execute the agent (local execution or via task_manager)"},"action":{"enum":["regenerate"],"description":"The action to perform. \"regenerate\" re-executes the last round with the original input. Requires conversation_id."},"agent_id":{"type":"string","description":"The ID of the agent to chat with. Defaults to the default Elastic AI agent."},"attachments":{"type":"array","items":{"type":"object","properties":{"data":{"type":"object","additionalProperties":{},"description":"Payload of the attachment. Required unless `origin` is provided (content is resolved once at send time)."},"description":{"type":"string","description":"Human-readable label for the attachment."},"group_id":{"type":"string","description":"Stable identifier for the logical group this attachment belongs to. Attachments sharing the same group_id were submitted together as a single logical entity."},"hidden":{"type":"boolean","description":"When true, the attachment will not be displayed in the UI."},"id":{"type":"string","description":"Optional id for the attachment."},"origin":{"type":"string","description":"Origin string (for example, saved object ID) for by-reference attachments. When provided without `data`, the content is resolved once using the attachment type’s `resolve` hook."},"type":{"type":"string","description":"Type of the attachment."}},"required":["type"]},"description":"**Technical Preview; added in 9.3.0.** Optional attachments to send with the message."},"browser_api_tools":{"type":"array","items":{"type":"object","properties":{"description":{"type":"string","description":"Description of what the browser API tool does."},"id":{"type":"string","description":"Unique identifier for the browser API tool."},"schema":{"description":"JSON Schema defining the tool parameters (JsonSchema7Type)."}},"required":["id","description","schema"]},"description":"Optional browser API tools to be registered as LLM tools with browser.* namespace. These tools execute on the client side."},"capabilities":{"type":"object","properties":{"visualizations":{"type":"boolean","description":"When true, allows the agent to render tabular data from tool results as interactive visualizations using custom XML elements in responses."}},"description":"Controls agent capabilities during conversation. Currently supports visualization rendering for tabular tool results."},"configuration_overrides":{"type":"object","properties":{"instructions":{"type":"string","description":"Custom instructions for the agent."},"tools":{"type":"array","items":{"type":"object","properties":{"tool_ids":{"type":"array","items":{"type":"string"}}},"required":["tool_ids"]},"description":"Tool selection to enable for this execution."}},"description":"Runtime configuration overrides. These override the stored agent configuration for this execution only."},"connector_id":{"oneOf":[{"type":"string"},{"type":"null"}],"description":"Optional connector ID for the agent to use for model routing. Mutually exclusive with `inference_id`; omit or use only one."},"conversation_id":{"type":"string","description":"Optional existing conversation ID to continue a previous conversation."},"execution_id":{"type":"string","description":"Optional client-generated execution ID. Provide it to address this execution later (for example, to abort it). Must be unique; defaults to a server-generated ID."},"inference_id":{"oneOf":[{"type":"string"},{"type":"null"}],"description":"Optional inference endpoint ID for model routing (public alias for the same internal identifier as `connector_id`). Mutually exclusive with `connector_id`."},"input":{"type":"string","description":"The user input message to send to the agent."},"prompts":{"type":"object","additionalProperties":{"oneOf":[{"type":"object","properties":{"allow":{"type":"boolean"}},"required":["allow"]},{"type":"object","properties":{"authorized":{"type":"boolean"}},"required":["authorized"]},{"type":"object","properties":{"answers":{"type":"array","items":{"type":"object","properties":{"choice":{"type":"array","items":{"type":"number"}},"custom":{"type":"string"},"skipped":{"type":"boolean"}}}}},"required":["answers"]}]},"description":"Use this field to respond to a `confirmation`, `authorization`, or `ask_user_question` prompt. Send an `allow` boolean to answer a `confirmation` prompt, an `authorized` boolean to answer an `authorization` prompt, or an `answers` array (one entry per question) to answer an `ask_user_question` prompt."}},"$schema":"https://json-schema.org/draft/2020-12/schema","title":"post-agent-builder-converse"}