@elastic/schemas 0.6.0 → 0.6.2

package/lib/cjs/kibana/json/security-endpoint-exceptions-api.update-endpoint-list-item.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "UpdateEndpointListItem", "x-api": { "id": "security-endpoint-exceptions-api.update-endpoint-list-item", "name": "update-endpoint-list-item", "namespace": "security-endpoint-exceptions-api" }, "x-method": "PUT", "x-path": "/api/endpoint_list/items", "x-destructive": true, "type": "object", "properties": { "_version": { "type": "string", "description": "The version id, normally returned by the API when the item is retrieved. Use it ensure updates are made against the latest version.", "x-found-in": "body" }, "comments": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemCommentArray", "x-found-in": "body" }, "description": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemDescription", "x-found-in": "body" }, "entries": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemEntryArray", "x-found-in": "body" }, "id": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemId", "description": "Either `id` or `item_id` must be specified", "x-found-in": "body" }, "item_id": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemHumanId", "description": "Either `id` or `item_id` must be specified", "x-found-in": "body" }, "meta": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemMeta", "x-found-in": "body" }, "name": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemName", "x-found-in": "body" }, "os_types": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemOsTypeArray", "x-found-in": "body" }, "tags": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemTags", "x-found-in": "body" }, "type": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemType", "x-found-in": "body" } }, "required": ["type", "name", "description", "entries"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "update-endpoint-list-item", "x-api": { "id": "security-endpoint-exceptions-api.update-endpoint-list-item", "name": "update-endpoint-list-item", "namespace": "security-endpoint-exceptions-api" }, "x-method": "PUT", "x-path": "/api/endpoint_list/items", "x-destructive": true, "type": "object", "properties": { "_version": { "type": "string", "description": "The version id, normally returned by the API when the item is retrieved. Use it ensure updates are made against the latest version.", "x-found-in": "body" }, "comments": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemCommentArray", "x-found-in": "body" }, "description": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemDescription", "x-found-in": "body" }, "entries": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemEntryArray", "x-found-in": "body" }, "id": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemId", "description": "Either `id` or `item_id` must be specified", "x-found-in": "body" }, "item_id": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemHumanId", "description": "Either `id` or `item_id` must be specified", "x-found-in": "body" }, "meta": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemMeta", "x-found-in": "body" }, "name": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemName", "x-found-in": "body" }, "os_types": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemOsTypeArray", "x-found-in": "body" }, "tags": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemTags", "x-found-in": "body" }, "type": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Exceptions_API_ExceptionListItemType", "x-found-in": "body" } }, "required": ["type", "name", "description", "entries"] }

package/lib/cjs/kibana/json/security-endpoint-management-api.cancel-action.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "CancelAction", "x-api": { "id": "security-endpoint-management-api.cancel-action", "name": "cancel-action", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/cancel", "x-destructive": true, "type": "object", "properties": { "body": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_CancelRouteRequestBody", "x-found-in": "body", "x-body-root": true } } }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "cancel-action", "x-api": { "id": "security-endpoint-management-api.cancel-action", "name": "cancel-action", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/cancel", "x-destructive": true, "type": "object", "properties": { "body": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_CancelRouteRequestBody", "x-found-in": "body", "x-body-root": true } } }

package/lib/cjs/kibana/json/security-endpoint-management-api.create-update-protection-updates-note.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "CreateUpdateProtectionUpdatesNote", "x-api": { "id": "security-endpoint-management-api.create-update-protection-updates-note", "name": "create-update-protection-updates-note", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/protection_updates_note/{package_policy_id}", "x-destructive": true, "type": "object", "properties": { "package_policy_id": { "type": "string", "description": "The package policy ID to create or update the protection updates note for.", "x-found-in": "path" }, "note": { "type": "string", "description": "The note content.", "x-found-in": "body" } }, "required": ["package_policy_id"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "create-update-protection-updates-note", "x-api": { "id": "security-endpoint-management-api.create-update-protection-updates-note", "name": "create-update-protection-updates-note", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/protection_updates_note/{package_policy_id}", "x-destructive": true, "type": "object", "properties": { "package_policy_id": { "type": "string", "description": "The package policy ID to create or update the protection updates note for.", "x-found-in": "path" }, "note": { "type": "string", "description": "The note content.", "x-found-in": "body" } }, "required": ["package_policy_id"] }

package/lib/cjs/kibana/json/security-endpoint-management-api.endpoint-execute-action.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "EndpointExecuteAction", "x-api": { "id": "security-endpoint-management-api.endpoint-execute-action", "name": "endpoint-execute-action", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/execute", "x-destructive": true, "type": "object", "properties": { "body": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_ExecuteRouteRequestBody", "x-found-in": "body", "x-body-root": true } } }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "endpoint-execute-action", "x-api": { "id": "security-endpoint-management-api.endpoint-execute-action", "name": "endpoint-execute-action", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/execute", "x-destructive": true, "type": "object", "properties": { "body": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_ExecuteRouteRequestBody", "x-found-in": "body", "x-body-root": true } } }

package/lib/cjs/kibana/json/security-endpoint-management-api.endpoint-file-download.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "EndpointFileDownload", "x-api": { "id": "security-endpoint-management-api.endpoint-file-download", "name": "endpoint-file-download", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/action/{action_id}/file/{file_id}/download", "x-destructive": false, "x-response-type": ["application/octet-stream"], "type": "object", "properties": { "action_id": { "type": "string", "description": "The ID of the response action that generated the file.", "x-found-in": "path" }, "file_id": { "type": "string", "description": "The file identifier is constructed in one of two ways:\n- For Elastic Defend agents (`agentType` of `endpoint`): combine the `action_id` and `agent_id` values using a dot (`.`) separator:\n`{file_id}` = `{action_id}.{agent_id}`\n- For all other agent types: the `file_id` is the `agent_id` for which the response action was sent to.\n", "x-found-in": "path" } }, "required": ["action_id", "file_id"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "endpoint-file-download", "x-api": { "id": "security-endpoint-management-api.endpoint-file-download", "name": "endpoint-file-download", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/action/{action_id}/file/{file_id}/download", "x-destructive": false, "x-response-type": ["application/octet-stream"], "type": "object", "properties": { "action_id": { "type": "string", "description": "The ID of the response action that generated the file.", "x-found-in": "path" }, "file_id": { "type": "string", "description": "The file identifier is constructed in one of two ways:\n- For Elastic Defend agents (`agentType` of `endpoint`): combine the `action_id` and `agent_id` values using a dot (`.`) separator:\n`{file_id}` = `{action_id}.{agent_id}`\n- For all other agent types: the `file_id` is the `agent_id` for which the response action was sent to.\n", "x-found-in": "path" } }, "required": ["action_id", "file_id"] }

package/lib/cjs/kibana/json/security-endpoint-management-api.endpoint-file-info.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "EndpointFileInfo", "x-api": { "id": "security-endpoint-management-api.endpoint-file-info", "name": "endpoint-file-info", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/action/{action_id}/file/{file_id}", "x-destructive": false, "type": "object", "properties": { "action_id": { "type": "string", "description": "The ID of the response action that generated the file.", "x-found-in": "path" }, "file_id": { "type": "string", "description": "The file identifier is constructed in one of two ways:\n- For Elastic Defend agents (`agentType` of `endpoint`): combine the `action_id` and `agent_id` values using a dot (`.`) separator:\n`{file_id}` = `{action_id}.{agent_id}`\n- For all other agent types: the `file_id` is the `agent_id` for which the response action was sent to.\n", "x-found-in": "path" } }, "required": ["action_id", "file_id"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "endpoint-file-info", "x-api": { "id": "security-endpoint-management-api.endpoint-file-info", "name": "endpoint-file-info", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/action/{action_id}/file/{file_id}", "x-destructive": false, "type": "object", "properties": { "action_id": { "type": "string", "description": "The ID of the response action that generated the file.", "x-found-in": "path" }, "file_id": { "type": "string", "description": "The file identifier is constructed in one of two ways:\n- For Elastic Defend agents (`agentType` of `endpoint`): combine the `action_id` and `agent_id` values using a dot (`.`) separator:\n`{file_id}` = `{action_id}.{agent_id}`\n- For all other agent types: the `file_id` is the `agent_id` for which the response action was sent to.\n", "x-found-in": "path" } }, "required": ["action_id", "file_id"] }

package/lib/cjs/kibana/json/security-endpoint-management-api.endpoint-generate-memory-dump.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "EndpointGenerateMemoryDump", "x-api": { "id": "security-endpoint-management-api.endpoint-generate-memory-dump", "name": "endpoint-generate-memory-dump", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/memory_dump", "x-destructive": true, "type": "object", "properties": { "body": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_MemoryDumpRouteRequestBody", "x-found-in": "body", "x-body-root": true } } }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "endpoint-generate-memory-dump", "x-api": { "id": "security-endpoint-management-api.endpoint-generate-memory-dump", "name": "endpoint-generate-memory-dump", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/memory_dump", "x-destructive": true, "type": "object", "properties": { "body": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_MemoryDumpRouteRequestBody", "x-found-in": "body", "x-body-root": true } } }

package/lib/cjs/kibana/json/security-endpoint-management-api.endpoint-get-actions-details.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "EndpointGetActionsDetails", "x-api": { "id": "security-endpoint-management-api.endpoint-get-actions-details", "name": "endpoint-get-actions-details", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/action/{action_id}", "x-destructive": false, "type": "object", "properties": { "action_id": { "type": "string", "description": "The ID of the response action to retrieve.", "x-found-in": "path" } }, "required": ["action_id"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "endpoint-get-actions-details", "x-api": { "id": "security-endpoint-management-api.endpoint-get-actions-details", "name": "endpoint-get-actions-details", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/action/{action_id}", "x-destructive": false, "type": "object", "properties": { "action_id": { "type": "string", "description": "The ID of the response action to retrieve.", "x-found-in": "path" } }, "required": ["action_id"] }

package/lib/cjs/kibana/json/security-endpoint-management-api.endpoint-get-actions-list.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "EndpointGetActionsList", "x-api": { "id": "security-endpoint-management-api.endpoint-get-actions-list", "name": "endpoint-get-actions-list", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/action", "x-destructive": false, "type": "object", "properties": { "page": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Page", "description": "The page number to return.", "x-found-in": "query" }, "pageSize": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_PageSize", "description": "The number of response actions to return per page.", "x-found-in": "query" }, "commands": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Commands", "description": "A list of response action command names to filter by.", "x-found-in": "query" }, "agentIds": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_AgentIds", "description": "A list of Elastic Agent IDs to filter the response actions by.", "x-found-in": "query" }, "userIds": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_UserIds", "description": "A list of user IDs that submitted the response actions.", "x-found-in": "query" }, "startDate": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_StartDate", "description": "A start date in ISO 8601 format or Date Math format (for example, `now-24h`).", "x-found-in": "query" }, "endDate": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_EndDate", "description": "An end date in ISO 8601 format or Date Math format (for example, `now`).", "x-found-in": "query" }, "agentTypes": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_AgentTypes", "description": "The agent type to filter response actions by. Defaults to `endpoint`.", "x-found-in": "query" }, "withOutputs": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_WithOutputs", "description": "A list of response action IDs whose outputs should be included in the response.", "x-found-in": "query" }, "types": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Types", "description": "A list of response action types to filter by (`automated`, `manual`).", "x-found-in": "query" } } }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "endpoint-get-actions-list", "x-api": { "id": "security-endpoint-management-api.endpoint-get-actions-list", "name": "endpoint-get-actions-list", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/action", "x-destructive": false, "type": "object", "properties": { "page": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Page", "description": "The page number to return.", "x-found-in": "query" }, "pageSize": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_PageSize", "description": "The number of response actions to return per page.", "x-found-in": "query" }, "commands": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Commands", "description": "A list of response action command names to filter by.", "x-found-in": "query" }, "agentIds": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_AgentIds", "description": "A list of Elastic Agent IDs to filter the response actions by.", "x-found-in": "query" }, "userIds": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_UserIds", "description": "A list of user IDs that submitted the response actions.", "x-found-in": "query" }, "startDate": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_StartDate", "description": "A start date in ISO 8601 format or Date Math format (for example, `now-24h`).", "x-found-in": "query" }, "endDate": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_EndDate", "description": "An end date in ISO 8601 format or Date Math format (for example, `now`).", "x-found-in": "query" }, "agentTypes": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_AgentTypes", "description": "The agent type to filter response actions by. Defaults to `endpoint`.", "x-found-in": "query" }, "withOutputs": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_WithOutputs", "description": "A list of response action IDs whose outputs should be included in the response.", "x-found-in": "query" }, "types": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Types", "description": "A list of response action types to filter by (`automated`, `manual`).", "x-found-in": "query" } } }

package/lib/cjs/kibana/json/security-endpoint-management-api.endpoint-get-actions-status.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "EndpointGetActionsStatus", "x-api": { "id": "security-endpoint-management-api.endpoint-get-actions-status", "name": "endpoint-get-actions-status", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/action_status", "x-destructive": false, "type": "object", "properties": { "agent_ids": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_AgentIds", "description": "A list of agent IDs to get the action status for.", "x-found-in": "query" } }, "required": ["agent_ids"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "endpoint-get-actions-status", "x-api": { "id": "security-endpoint-management-api.endpoint-get-actions-status", "name": "endpoint-get-actions-status", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/action_status", "x-destructive": false, "type": "object", "properties": { "agent_ids": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_AgentIds", "description": "A list of agent IDs to get the action status for.", "x-found-in": "query" } }, "required": ["agent_ids"] }

package/lib/cjs/kibana/json/security-endpoint-management-api.endpoint-get-file-action.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "EndpointGetFileAction", "x-api": { "id": "security-endpoint-management-api.endpoint-get-file-action", "name": "endpoint-get-file-action", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/get_file", "x-destructive": true, "type": "object", "properties": { "body": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_GetFileRouteRequestBody", "x-found-in": "body", "x-body-root": true } } }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "endpoint-get-file-action", "x-api": { "id": "security-endpoint-management-api.endpoint-get-file-action", "name": "endpoint-get-file-action", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/get_file", "x-destructive": true, "type": "object", "properties": { "body": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_GetFileRouteRequestBody", "x-found-in": "body", "x-body-root": true } } }

package/lib/cjs/kibana/json/security-endpoint-management-api.endpoint-get-processes-action.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "EndpointGetProcessesAction", "x-api": { "id": "security-endpoint-management-api.endpoint-get-processes-action", "name": "endpoint-get-processes-action", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/running_procs", "x-destructive": true, "type": "object", "properties": { "body": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_GetProcessesRouteRequestBody", "x-found-in": "body", "x-body-root": true } } }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "endpoint-get-processes-action", "x-api": { "id": "security-endpoint-management-api.endpoint-get-processes-action", "name": "endpoint-get-processes-action", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/running_procs", "x-destructive": true, "type": "object", "properties": { "body": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_GetProcessesRouteRequestBody", "x-found-in": "body", "x-body-root": true } } }

package/lib/cjs/kibana/json/security-endpoint-management-api.endpoint-isolate-action.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "EndpointIsolateAction", "x-api": { "id": "security-endpoint-management-api.endpoint-isolate-action", "name": "endpoint-isolate-action", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/isolate", "x-destructive": true, "type": "object", "properties": { "agent_type": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_AgentTypes", "x-found-in": "body" }, "alert_ids": { "type": "array", "items": { "type": "string" }, "description": "If this action is associated with any alerts, they can be specified here. The action will be logged in any cases associated with the specified alerts. Max of 50.", "x-found-in": "body" }, "case_ids": { "type": "array", "items": { "type": "string" }, "description": "The IDs of cases where the action taken will be logged. Max of 50.", "x-found-in": "body" }, "comment": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Comment", "x-found-in": "body" }, "endpoint_ids": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_EndpointIds", "x-found-in": "body" }, "parameters": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Parameters", "x-found-in": "body" } }, "required": ["endpoint_ids"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "endpoint-isolate-action", "x-api": { "id": "security-endpoint-management-api.endpoint-isolate-action", "name": "endpoint-isolate-action", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/isolate", "x-destructive": true, "type": "object", "properties": { "agent_type": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_AgentTypes", "x-found-in": "body" }, "alert_ids": { "type": "array", "items": { "type": "string" }, "description": "If this action is associated with any alerts, they can be specified here. The action will be logged in any cases associated with the specified alerts. Max of 50.", "x-found-in": "body" }, "case_ids": { "type": "array", "items": { "type": "string" }, "description": "The IDs of cases where the action taken will be logged. Max of 50.", "x-found-in": "body" }, "comment": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Comment", "x-found-in": "body" }, "endpoint_ids": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_EndpointIds", "x-found-in": "body" }, "parameters": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Parameters", "x-found-in": "body" } }, "required": ["endpoint_ids"] }

package/lib/cjs/kibana/json/security-endpoint-management-api.endpoint-kill-process-action.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "EndpointKillProcessAction", "x-api": { "id": "security-endpoint-management-api.endpoint-kill-process-action", "name": "endpoint-kill-process-action", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/kill_process", "x-destructive": true, "type": "object", "properties": { "body": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_KillProcessRouteRequestBody", "x-found-in": "body", "x-body-root": true } } }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "endpoint-kill-process-action", "x-api": { "id": "security-endpoint-management-api.endpoint-kill-process-action", "name": "endpoint-kill-process-action", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/kill_process", "x-destructive": true, "type": "object", "properties": { "body": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_KillProcessRouteRequestBody", "x-found-in": "body", "x-body-root": true } } }

package/lib/cjs/kibana/json/security-endpoint-management-api.endpoint-scan-action.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "EndpointScanAction", "x-api": { "id": "security-endpoint-management-api.endpoint-scan-action", "name": "endpoint-scan-action", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/scan", "x-destructive": true, "type": "object", "properties": { "body": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_ScanRouteRequestBody", "x-found-in": "body", "x-body-root": true } } }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "endpoint-scan-action", "x-api": { "id": "security-endpoint-management-api.endpoint-scan-action", "name": "endpoint-scan-action", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/scan", "x-destructive": true, "type": "object", "properties": { "body": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_ScanRouteRequestBody", "x-found-in": "body", "x-body-root": true } } }

package/lib/cjs/kibana/json/security-endpoint-management-api.endpoint-script-library-delete-script.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "EndpointScriptLibraryDeleteScript", "x-api": { "id": "security-endpoint-management-api.endpoint-script-library-delete-script", "name": "endpoint-script-library-delete-script", "namespace": "security-endpoint-management-api" }, "x-method": "DELETE", "x-path": "/api/endpoint/scripts_library/{script_id}", "x-destructive": true, "type": "object", "properties": { "script_id": { "type": "string", "description": "The ID of the script entry to be deleted.", "x-found-in": "path" } }, "required": ["script_id"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "endpoint-script-library-delete-script", "x-api": { "id": "security-endpoint-management-api.endpoint-script-library-delete-script", "name": "endpoint-script-library-delete-script", "namespace": "security-endpoint-management-api" }, "x-method": "DELETE", "x-path": "/api/endpoint/scripts_library/{script_id}", "x-destructive": true, "type": "object", "properties": { "script_id": { "type": "string", "description": "The ID of the script entry to be deleted.", "x-found-in": "path" } }, "required": ["script_id"] }

package/lib/cjs/kibana/json/security-endpoint-management-api.endpoint-script-library-download-script.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "EndpointScriptLibraryDownloadScript", "x-api": { "id": "security-endpoint-management-api.endpoint-script-library-download-script", "name": "endpoint-script-library-download-script", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/scripts_library/{script_id}/download", "x-destructive": false, "x-response-type": ["application/octet-stream"], "type": "object", "properties": { "script_id": { "type": "string", "description": "The ID of the script entry.", "x-found-in": "path" } }, "required": ["script_id"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "endpoint-script-library-download-script", "x-api": { "id": "security-endpoint-management-api.endpoint-script-library-download-script", "name": "endpoint-script-library-download-script", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/scripts_library/{script_id}/download", "x-destructive": false, "x-response-type": ["application/octet-stream"], "type": "object", "properties": { "script_id": { "type": "string", "description": "The ID of the script entry.", "x-found-in": "path" } }, "required": ["script_id"] }

package/lib/cjs/kibana/json/security-endpoint-management-api.endpoint-script-library-get-one-script.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "EndpointScriptLibraryGetOneScript", "x-api": { "id": "security-endpoint-management-api.endpoint-script-library-get-one-script", "name": "endpoint-script-library-get-one-script", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/scripts_library/{script_id}", "x-destructive": false, "type": "object", "properties": { "script_id": { "type": "string", "description": "The ID of the script entry.", "x-found-in": "path" } }, "required": ["script_id"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "endpoint-script-library-get-one-script", "x-api": { "id": "security-endpoint-management-api.endpoint-script-library-get-one-script", "name": "endpoint-script-library-get-one-script", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/scripts_library/{script_id}", "x-destructive": false, "type": "object", "properties": { "script_id": { "type": "string", "description": "The ID of the script entry.", "x-found-in": "path" } }, "required": ["script_id"] }

package/lib/cjs/kibana/json/security-endpoint-management-api.endpoint-script-library-list-scripts.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "EndpointScriptLibraryListScripts", "x-api": { "id": "security-endpoint-management-api.endpoint-script-library-list-scripts", "name": "endpoint-script-library-list-scripts", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/scripts_library", "x-destructive": false, "type": "object", "properties": { "page": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Page", "description": "Page number of the results to return. Defaults to 1.", "x-found-in": "query" }, "pageSize": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_ApiPageSize", "description": "Number of results to return per page. Defaults to 10. Max value is 1000.", "x-found-in": "query" }, "sortField": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_ApiSortField", "description": "The field to sort the results by. Defaults to name.", "x-found-in": "query" }, "sortDirection": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_SortDirection", "description": "The direction to sort the results by. Defaults to asc (ascending).", "x-found-in": "query" }, "kuery": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Kuery", "description": "A KQL query string to filter the list of scripts. Nearly all fields in the script object are searchable.\n", "x-found-in": "query" } } }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "endpoint-script-library-list-scripts", "x-api": { "id": "security-endpoint-management-api.endpoint-script-library-list-scripts", "name": "endpoint-script-library-list-scripts", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/scripts_library", "x-destructive": false, "type": "object", "properties": { "page": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Page", "description": "Page number of the results to return. Defaults to 1.", "x-found-in": "query" }, "pageSize": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_ApiPageSize", "description": "Number of results to return per page. Defaults to 10. Max value is 1000.", "x-found-in": "query" }, "sortField": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_ApiSortField", "description": "The field to sort the results by. Defaults to name.", "x-found-in": "query" }, "sortDirection": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_SortDirection", "description": "The direction to sort the results by. Defaults to asc (ascending).", "x-found-in": "query" }, "kuery": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Kuery", "description": "A KQL query string to filter the list of scripts. Nearly all fields in the script object are searchable.\n", "x-found-in": "query" } } }

package/lib/cjs/kibana/json/security-endpoint-management-api.endpoint-suspend-process-action.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "EndpointSuspendProcessAction", "x-api": { "id": "security-endpoint-management-api.endpoint-suspend-process-action", "name": "endpoint-suspend-process-action", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/suspend_process", "x-destructive": true, "type": "object", "properties": { "body": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_SuspendProcessRouteRequestBody", "x-found-in": "body", "x-body-root": true } } }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "endpoint-suspend-process-action", "x-api": { "id": "security-endpoint-management-api.endpoint-suspend-process-action", "name": "endpoint-suspend-process-action", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/suspend_process", "x-destructive": true, "type": "object", "properties": { "body": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_SuspendProcessRouteRequestBody", "x-found-in": "body", "x-body-root": true } } }

package/lib/cjs/kibana/json/security-endpoint-management-api.endpoint-unisolate-action.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "EndpointUnisolateAction", "x-api": { "id": "security-endpoint-management-api.endpoint-unisolate-action", "name": "endpoint-unisolate-action", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/unisolate", "x-destructive": true, "type": "object", "properties": { "agent_type": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_AgentTypes", "x-found-in": "body" }, "alert_ids": { "type": "array", "items": { "type": "string" }, "description": "If this action is associated with any alerts, they can be specified here. The action will be logged in any cases associated with the specified alerts. Max of 50.", "x-found-in": "body" }, "case_ids": { "type": "array", "items": { "type": "string" }, "description": "The IDs of cases where the action taken will be logged. Max of 50.", "x-found-in": "body" }, "comment": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Comment", "x-found-in": "body" }, "endpoint_ids": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_EndpointIds", "x-found-in": "body" }, "parameters": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Parameters", "x-found-in": "body" } }, "required": ["endpoint_ids"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "endpoint-unisolate-action", "x-api": { "id": "security-endpoint-management-api.endpoint-unisolate-action", "name": "endpoint-unisolate-action", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/unisolate", "x-destructive": true, "type": "object", "properties": { "agent_type": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_AgentTypes", "x-found-in": "body" }, "alert_ids": { "type": "array", "items": { "type": "string" }, "description": "If this action is associated with any alerts, they can be specified here. The action will be logged in any cases associated with the specified alerts. Max of 50.", "x-found-in": "body" }, "case_ids": { "type": "array", "items": { "type": "string" }, "description": "The IDs of cases where the action taken will be logged. Max of 50.", "x-found-in": "body" }, "comment": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Comment", "x-found-in": "body" }, "endpoint_ids": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_EndpointIds", "x-found-in": "body" }, "parameters": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Parameters", "x-found-in": "body" } }, "required": ["endpoint_ids"] }

package/lib/cjs/kibana/json/security-endpoint-management-api.get-endpoint-metadata-list.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "GetEndpointMetadataList", "x-api": { "id": "security-endpoint-management-api.get-endpoint-metadata-list", "name": "get-endpoint-metadata-list", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/metadata", "x-destructive": false, "type": "object", "properties": { "page": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Page", "description": "The page number to return.", "x-found-in": "query" }, "pageSize": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_PageSize", "description": "The number of endpoints to return per page.", "x-found-in": "query" }, "kuery": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Kuery", "description": "A KQL string to filter the endpoint metadata results.", "x-found-in": "query" }, "hostStatuses": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_HostStatuses", "description": "A set of host statuses to filter the results by (for example, `healthy`, `updating`).", "x-found-in": "query" }, "sortField": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_SortField", "description": "The field used to sort the results.", "x-found-in": "query" }, "sortDirection": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_SortDirection", "description": "The sort order, either `asc` or `desc`.", "x-found-in": "query" } }, "required": ["hostStatuses"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "get-endpoint-metadata-list", "x-api": { "id": "security-endpoint-management-api.get-endpoint-metadata-list", "name": "get-endpoint-metadata-list", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/metadata", "x-destructive": false, "type": "object", "properties": { "page": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Page", "description": "The page number to return.", "x-found-in": "query" }, "pageSize": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_PageSize", "description": "The number of endpoints to return per page.", "x-found-in": "query" }, "kuery": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_Kuery", "description": "A KQL string to filter the endpoint metadata results.", "x-found-in": "query" }, "hostStatuses": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_HostStatuses", "description": "A set of host statuses to filter the results by (for example, `healthy`, `updating`).", "x-found-in": "query" }, "sortField": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_SortField", "description": "The field used to sort the results.", "x-found-in": "query" }, "sortDirection": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_SortDirection", "description": "The sort order, either `asc` or `desc`.", "x-found-in": "query" } }, "required": ["hostStatuses"] }

package/lib/cjs/kibana/json/security-endpoint-management-api.get-endpoint-metadata.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "GetEndpointMetadata", "x-api": { "id": "security-endpoint-management-api.get-endpoint-metadata", "name": "get-endpoint-metadata", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/metadata/{id}", "x-destructive": false, "type": "object", "properties": { "id": { "type": "string", "description": "The agent ID of the endpoint.", "x-found-in": "path" } }, "required": ["id"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "get-endpoint-metadata", "x-api": { "id": "security-endpoint-management-api.get-endpoint-metadata", "name": "get-endpoint-metadata", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/metadata/{id}", "x-destructive": false, "type": "object", "properties": { "id": { "type": "string", "description": "The agent ID of the endpoint.", "x-found-in": "path" } }, "required": ["id"] }

package/lib/cjs/kibana/json/security-endpoint-management-api.get-policy-response.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "GetPolicyResponse", "x-api": { "id": "security-endpoint-management-api.get-policy-response", "name": "get-policy-response", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/policy_response", "x-destructive": false, "type": "object", "properties": { "agentId": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_AgentId", "description": "The agent ID to retrieve the policy response for.", "x-found-in": "query" } }, "required": ["agentId"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "get-policy-response", "x-api": { "id": "security-endpoint-management-api.get-policy-response", "name": "get-policy-response", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/policy_response", "x-destructive": false, "type": "object", "properties": { "agentId": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_AgentId", "description": "The agent ID to retrieve the policy response for.", "x-found-in": "query" } }, "required": ["agentId"] }

package/lib/cjs/kibana/json/security-endpoint-management-api.get-protection-updates-note.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "GetProtectionUpdatesNote", "x-api": { "id": "security-endpoint-management-api.get-protection-updates-note", "name": "get-protection-updates-note", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/protection_updates_note/{package_policy_id}", "x-destructive": false, "type": "object", "properties": { "package_policy_id": { "type": "string", "description": "The package policy ID to retrieve the protection updates note for.", "x-found-in": "path" } }, "required": ["package_policy_id"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "get-protection-updates-note", "x-api": { "id": "security-endpoint-management-api.get-protection-updates-note", "name": "get-protection-updates-note", "namespace": "security-endpoint-management-api" }, "x-method": "GET", "x-path": "/api/endpoint/protection_updates_note/{package_policy_id}", "x-destructive": false, "type": "object", "properties": { "package_policy_id": { "type": "string", "description": "The package policy ID to retrieve the protection updates note for.", "x-found-in": "path" } }, "required": ["package_policy_id"] }

package/lib/cjs/kibana/json/security-endpoint-management-api.run-script-action.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "RunScriptAction", "x-api": { "id": "security-endpoint-management-api.run-script-action", "name": "run-script-action", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/run_script", "x-destructive": true, "type": "object", "properties": { "body": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_RunScriptRouteRequestBody", "x-found-in": "body", "x-body-root": true } } }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "run-script-action", "x-api": { "id": "security-endpoint-management-api.run-script-action", "name": "run-script-action", "namespace": "security-endpoint-management-api" }, "x-method": "POST", "x-path": "/api/endpoint/action/run_script", "x-destructive": true, "type": "object", "properties": { "body": { "$ref": "./_defs.json#/$defs/Security_Endpoint_Management_API_RunScriptRouteRequestBody", "x-found-in": "body", "x-body-root": true } } }

package/lib/cjs/kibana/json/security-entity-analytics-api.assign-watchlist-entities.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "AssignWatchlistEntities", "x-api": { "id": "security-entity-analytics-api.assign-watchlist-entities", "name": "assign-watchlist-entities", "namespace": "security-entity-analytics-api" }, "x-method": "POST", "x-path": "/api/entity_analytics/watchlists/{watchlist_id}/entities/assign", "x-destructive": true, "x-availability": { "serverless": { "stability": "tech_preview", "since": "9.4.0" } }, "type": "object", "properties": { "watchlist_id": { "type": "string", "description": "The ID of the watchlist to add entities to", "x-found-in": "path" }, "euids": { "type": "array", "items": { "type": "string" }, "description": "The EUIDs of the entities to assign", "x-found-in": "body" } }, "required": ["watchlist_id", "euids"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "assign-watchlist-entities", "x-api": { "id": "security-entity-analytics-api.assign-watchlist-entities", "name": "assign-watchlist-entities", "namespace": "security-entity-analytics-api" }, "x-method": "POST", "x-path": "/api/entity_analytics/watchlists/{watchlist_id}/entities/assign", "x-destructive": true, "x-availability": { "serverless": { "stability": "tech_preview", "since": "9.4.0" } }, "type": "object", "properties": { "watchlist_id": { "type": "string", "description": "The ID of the watchlist to add entities to", "x-found-in": "path" }, "euids": { "type": "array", "items": { "type": "string" }, "description": "The EUIDs of the entities to assign", "x-found-in": "body" } }, "required": ["watchlist_id", "euids"] }

package/lib/cjs/kibana/json/security-entity-analytics-api.bulk-upsert-asset-criticality-records.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "BulkUpsertAssetCriticalityRecords", "x-api": { "id": "security-entity-analytics-api.bulk-upsert-asset-criticality-records", "name": "bulk-upsert-asset-criticality-records", "namespace": "security-entity-analytics-api" }, "x-method": "POST", "x-path": "/api/asset_criticality/bulk", "x-destructive": true, "type": "object", "properties": { "records": { "type": "array", "items": { "type": "object", "properties": { "id_field": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_IdField", "description": "The field representing the ID." }, "id_value": { "type": "string", "description": "The ID value of the asset." }, "criticality_level": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityLevelsForBulkUpload" } }, "required": ["id_value", "id_field", "criticality_level"] }, "x-found-in": "body" } }, "required": ["records"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "bulk-upsert-asset-criticality-records", "x-api": { "id": "security-entity-analytics-api.bulk-upsert-asset-criticality-records", "name": "bulk-upsert-asset-criticality-records", "namespace": "security-entity-analytics-api" }, "x-method": "POST", "x-path": "/api/asset_criticality/bulk", "x-destructive": true, "type": "object", "properties": { "records": { "type": "array", "items": { "type": "object", "properties": { "id_field": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_IdField", "description": "The field representing the ID." }, "id_value": { "type": "string", "description": "The ID value of the asset." }, "criticality_level": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityLevelsForBulkUpload" } }, "required": ["id_value", "id_field", "criticality_level"] }, "x-found-in": "body" } }, "required": ["records"] }

package/lib/cjs/kibana/json/security-entity-analytics-api.configure-risk-engine-saved-object.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "ConfigureRiskEngineSavedObject", "x-api": { "id": "security-entity-analytics-api.configure-risk-engine-saved-object", "name": "configure-risk-engine-saved-object", "namespace": "security-entity-analytics-api" }, "x-method": "PATCH", "x-path": "/api/risk_score/engine/saved_object/configure", "x-destructive": true, "type": "object", "properties": { "enable_reset_to_zero": { "type": "boolean", "x-found-in": "body" }, "exclude_alert_statuses": { "type": "array", "items": { "type": "string" }, "x-found-in": "body" }, "exclude_alert_tags": { "type": "array", "items": { "type": "string" }, "x-found-in": "body" }, "filters": { "type": "array", "items": { "type": "object", "properties": { "entity_types": { "type": "array", "items": { "enum": ["host", "user", "service"] } }, "filter": { "type": "string", "description": "KQL filter string" } }, "required": ["entity_types", "filter"] }, "x-found-in": "body" }, "page_size": { "type": "number", "description": "Number of entities to score per page. Higher values reduce total scoring time by reducing the number of alert-index scans, but cannot exceed the ES|QL result limit (10,000 by default).\n", "x-found-in": "body" }, "range": { "type": "object", "properties": { "end": { "type": "string" }, "start": { "type": "string" } }, "x-found-in": "body" } } }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "configure-risk-engine-saved-object", "x-api": { "id": "security-entity-analytics-api.configure-risk-engine-saved-object", "name": "configure-risk-engine-saved-object", "namespace": "security-entity-analytics-api" }, "x-method": "PATCH", "x-path": "/api/risk_score/engine/saved_object/configure", "x-destructive": true, "type": "object", "properties": { "enable_reset_to_zero": { "type": "boolean", "x-found-in": "body" }, "exclude_alert_statuses": { "type": "array", "items": { "type": "string" }, "x-found-in": "body" }, "exclude_alert_tags": { "type": "array", "items": { "type": "string" }, "x-found-in": "body" }, "filters": { "type": "array", "items": { "type": "object", "properties": { "entity_types": { "type": "array", "items": { "enum": ["host", "user", "service"] } }, "filter": { "type": "string", "description": "KQL filter string" } }, "required": ["entity_types", "filter"] }, "x-found-in": "body" }, "page_size": { "type": "number", "description": "Number of entities to score per page. Higher values reduce total scoring time by reducing the number of alert-index scans, but cannot exceed the ES|QL result limit (10,000 by default).\n", "x-found-in": "body" }, "range": { "type": "object", "properties": { "end": { "type": "string" }, "start": { "type": "string" } }, "x-found-in": "body" } } }

package/lib/cjs/kibana/json/security-entity-analytics-api.create-asset-criticality-record.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "CreateAssetCriticalityRecord", "x-api": { "id": "security-entity-analytics-api.create-asset-criticality-record", "name": "create-asset-criticality-record", "namespace": "security-entity-analytics-api" }, "x-method": "POST", "x-path": "/api/asset_criticality", "x-destructive": true, "type": "object", "properties": { "id_field": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_IdField", "description": "The field representing the ID.", "x-found-in": "body" }, "id_value": { "type": "string", "description": "The ID value of the asset.", "x-found-in": "body" }, "criticality_level": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityLevel", "x-found-in": "body" }, "refresh": { "enum": ["wait_for"], "description": "If 'wait_for' the request will wait for the index refresh.", "x-found-in": "body" } }, "required": ["id_value", "id_field", "criticality_level"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "create-asset-criticality-record", "x-api": { "id": "security-entity-analytics-api.create-asset-criticality-record", "name": "create-asset-criticality-record", "namespace": "security-entity-analytics-api" }, "x-method": "POST", "x-path": "/api/asset_criticality", "x-destructive": true, "type": "object", "properties": { "id_field": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_IdField", "description": "The field representing the ID.", "x-found-in": "body" }, "id_value": { "type": "string", "description": "The ID value of the asset.", "x-found-in": "body" }, "criticality_level": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_AssetCriticalityLevel", "x-found-in": "body" }, "refresh": { "enum": ["wait_for"], "description": "If 'wait_for' the request will wait for the index refresh.", "x-found-in": "body" } }, "required": ["id_value", "id_field", "criticality_level"] }

package/lib/cjs/kibana/json/security-entity-analytics-api.create-priv-mon-user.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "CreatePrivMonUser", "x-api": { "id": "security-entity-analytics-api.create-priv-mon-user", "name": "create-priv-mon-user", "namespace": "security-entity-analytics-api" }, "x-method": "POST", "x-path": "/api/entity_analytics/monitoring/users", "x-destructive": false, "type": "object", "properties": { "body": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_UserName", "x-found-in": "body", "x-body-root": true } } }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "create-priv-mon-user", "x-api": { "id": "security-entity-analytics-api.create-priv-mon-user", "name": "create-priv-mon-user", "namespace": "security-entity-analytics-api" }, "x-method": "POST", "x-path": "/api/entity_analytics/monitoring/users", "x-destructive": false, "type": "object", "properties": { "body": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_UserName", "x-found-in": "body", "x-body-root": true } } }

package/lib/cjs/kibana/json/security-entity-analytics-api.create-watchlist.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "CreateWatchlist", "x-api": { "id": "security-entity-analytics-api.create-watchlist", "name": "create-watchlist", "namespace": "security-entity-analytics-api" }, "x-method": "POST", "x-path": "/api/entity_analytics/watchlists", "x-destructive": false, "x-availability": { "serverless": { "stability": "tech_preview" } }, "type": "object", "properties": { "description": { "type": "string", "description": "Description of the watchlist", "x-found-in": "body" }, "entitySources": { "type": "array", "items": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "filter": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_Filter" }, "identifierField": { "type": "string", "description": "Field used to query the entity store for index-type sources" }, "indexPattern": { "type": "string" }, "integrationName": { "type": "string", "description": "Required when type is entity_analytics_integration. One of entityanalytics_okta, entityanalytics_ad." }, "matchers": { "type": "array", "items": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_Matcher" } }, "name": { "type": "string" }, "queryRule": { "type": "string", "description": "KQL query used to filter data from the provided index patterns" }, "range": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_DateRange" }, "type": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_EntitySourceType" } }, "required": ["type", "name"] }, "description": "Optional entity sources to create and link to the watchlist", "x-found-in": "body" }, "managed": { "type": "boolean", "description": "Indicates if the watchlist is managed by the system", "x-found-in": "body" }, "name": { "type": "string", "description": "Unique name for the watchlist", "x-found-in": "body" }, "riskModifier": { "type": "number", "description": "Risk score modifier associated with the watchlist", "x-found-in": "body" } }, "required": ["name", "riskModifier"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "create-watchlist", "x-api": { "id": "security-entity-analytics-api.create-watchlist", "name": "create-watchlist", "namespace": "security-entity-analytics-api" }, "x-method": "POST", "x-path": "/api/entity_analytics/watchlists", "x-destructive": false, "x-availability": { "serverless": { "stability": "tech_preview" } }, "type": "object", "properties": { "description": { "type": "string", "description": "Description of the watchlist", "x-found-in": "body" }, "entitySources": { "type": "array", "items": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "filter": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_Filter" }, "identifierField": { "type": "string", "description": "Field used to query the entity store for index-type sources" }, "indexPattern": { "type": "string" }, "integrationName": { "type": "string", "description": "Required when type is entity_analytics_integration. One of entityanalytics_okta, entityanalytics_ad." }, "matchers": { "type": "array", "items": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_Matcher" } }, "name": { "type": "string" }, "queryRule": { "type": "string", "description": "KQL query used to filter data from the provided index patterns" }, "range": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_DateRange" }, "type": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_EntitySourceType" } }, "required": ["type", "name"] }, "description": "Optional entity sources to create and link to the watchlist", "x-found-in": "body" }, "managed": { "type": "boolean", "description": "Indicates if the watchlist is managed by the system", "x-found-in": "body" }, "name": { "type": "string", "description": "Unique name for the watchlist", "x-found-in": "body" }, "riskModifier": { "type": "number", "description": "Risk score modifier associated with the watchlist", "x-found-in": "body" } }, "required": ["name", "riskModifier"] }

package/lib/cjs/kibana/json/security-entity-analytics-api.delete-asset-criticality-record.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "DeleteAssetCriticalityRecord", "x-api": { "id": "security-entity-analytics-api.delete-asset-criticality-record", "name": "delete-asset-criticality-record", "namespace": "security-entity-analytics-api" }, "x-method": "DELETE", "x-path": "/api/asset_criticality", "x-destructive": true, "type": "object", "properties": { "id_value": { "type": "string", "description": "The ID value of the asset.", "x-found-in": "query" }, "id_field": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_IdField", "description": "The field representing the ID.", "x-found-in": "query" }, "refresh": { "enum": ["wait_for"], "description": "If 'wait_for' the request will wait for the index refresh.", "x-found-in": "query" } }, "required": ["id_value", "id_field"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "delete-asset-criticality-record", "x-api": { "id": "security-entity-analytics-api.delete-asset-criticality-record", "name": "delete-asset-criticality-record", "namespace": "security-entity-analytics-api" }, "x-method": "DELETE", "x-path": "/api/asset_criticality", "x-destructive": true, "type": "object", "properties": { "id_value": { "type": "string", "description": "The ID value of the asset.", "x-found-in": "query" }, "id_field": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_IdField", "description": "The field representing the ID.", "x-found-in": "query" }, "refresh": { "enum": ["wait_for"], "description": "If 'wait_for' the request will wait for the index refresh.", "x-found-in": "query" } }, "required": ["id_value", "id_field"] }

package/lib/cjs/kibana/json/security-entity-analytics-api.delete-entity-engine.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "DeleteEntityEngine", "x-api": { "id": "security-entity-analytics-api.delete-entity-engine", "name": "delete-entity-engine", "namespace": "security-entity-analytics-api" }, "x-method": "DELETE", "x-path": "/api/entity_store/engines/{entityType}", "x-destructive": true, "type": "object", "properties": { "entityType": { "type": "string", "description": "The entity type of the engine (either 'user' or 'host').", "x-found-in": "path" }, "delete_data": { "type": "boolean", "description": "Control flag to also delete the entity data.", "x-found-in": "query" }, "data": { "type": "boolean", "description": "Control flag to also delete the entity data.", "x-found-in": "query" } }, "required": ["entityType"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "delete-entity-engine", "x-api": { "id": "security-entity-analytics-api.delete-entity-engine", "name": "delete-entity-engine", "namespace": "security-entity-analytics-api" }, "x-method": "DELETE", "x-path": "/api/entity_store/engines/{entityType}", "x-destructive": true, "type": "object", "properties": { "entityType": { "type": "string", "description": "The entity type of the engine (either 'user' or 'host').", "x-found-in": "path" }, "delete_data": { "type": "boolean", "description": "Control flag to also delete the entity data.", "x-found-in": "query" }, "data": { "type": "boolean", "description": "Control flag to also delete the entity data.", "x-found-in": "query" } }, "required": ["entityType"] }

package/lib/cjs/kibana/json/security-entity-analytics-api.delete-entity-engines.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "DeleteEntityEngines", "x-api": { "id": "security-entity-analytics-api.delete-entity-engines", "name": "delete-entity-engines", "namespace": "security-entity-analytics-api" }, "x-method": "DELETE", "x-path": "/api/entity_store/engines", "x-destructive": true, "type": "object", "properties": { "entityTypes": { "type": "array", "items": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_EntityType" }, "description": "The entity type of the engine ('user', 'host', 'service', 'generic').", "x-found-in": "query" }, "delete_data": { "type": "boolean", "description": "Control flag to also delete the entity data.", "x-found-in": "query" } } }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "delete-entity-engines", "x-api": { "id": "security-entity-analytics-api.delete-entity-engines", "name": "delete-entity-engines", "namespace": "security-entity-analytics-api" }, "x-method": "DELETE", "x-path": "/api/entity_store/engines", "x-destructive": true, "type": "object", "properties": { "entityTypes": { "type": "array", "items": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_EntityType" }, "description": "The entity type of the engine ('user', 'host', 'service', 'generic').", "x-found-in": "query" }, "delete_data": { "type": "boolean", "description": "Control flag to also delete the entity data.", "x-found-in": "query" } } }

package/lib/cjs/kibana/json/security-entity-analytics-api.delete-monitoring-engine.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "DeleteMonitoringEngine", "x-api": { "id": "security-entity-analytics-api.delete-monitoring-engine", "name": "delete-monitoring-engine", "namespace": "security-entity-analytics-api" }, "x-method": "DELETE", "x-path": "/api/entity_analytics/monitoring/engine/delete", "x-destructive": true, "type": "object", "properties": { "data": { "type": "boolean", "description": "Whether to delete all the privileged user data", "x-found-in": "query" } } }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "delete-monitoring-engine", "x-api": { "id": "security-entity-analytics-api.delete-monitoring-engine", "name": "delete-monitoring-engine", "namespace": "security-entity-analytics-api" }, "x-method": "DELETE", "x-path": "/api/entity_analytics/monitoring/engine/delete", "x-destructive": true, "type": "object", "properties": { "data": { "type": "boolean", "description": "Whether to delete all the privileged user data", "x-found-in": "query" } } }

package/lib/cjs/kibana/json/security-entity-analytics-api.delete-priv-mon-user.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "DeletePrivMonUser", "x-api": { "id": "security-entity-analytics-api.delete-priv-mon-user", "name": "delete-priv-mon-user", "namespace": "security-entity-analytics-api" }, "x-method": "DELETE", "x-path": "/api/entity_analytics/monitoring/users/{id}", "x-destructive": true, "type": "object", "properties": { "id": { "type": "string", "description": "The document ID of the monitored user to delete", "x-found-in": "path" } }, "required": ["id"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "delete-priv-mon-user", "x-api": { "id": "security-entity-analytics-api.delete-priv-mon-user", "name": "delete-priv-mon-user", "namespace": "security-entity-analytics-api" }, "x-method": "DELETE", "x-path": "/api/entity_analytics/monitoring/users/{id}", "x-destructive": true, "type": "object", "properties": { "id": { "type": "string", "description": "The document ID of the monitored user to delete", "x-found-in": "path" } }, "required": ["id"] }

package/lib/cjs/kibana/json/security-entity-analytics-api.delete-single-entity.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "DeleteSingleEntity", "x-api": { "id": "security-entity-analytics-api.delete-single-entity", "name": "delete-single-entity", "namespace": "security-entity-analytics-api" }, "x-method": "DELETE", "x-path": "/api/entity_store/entities/{entityType}", "x-destructive": true, "type": "object", "properties": { "entityType": { "type": "string", "description": "", "x-found-in": "path" }, "id": { "type": "string", "description": "Identifier of the entity to be deleted, commonly entity.id value.", "x-found-in": "body" } }, "required": ["entityType", "id"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "delete-single-entity", "x-api": { "id": "security-entity-analytics-api.delete-single-entity", "name": "delete-single-entity", "namespace": "security-entity-analytics-api" }, "x-method": "DELETE", "x-path": "/api/entity_store/entities/{entityType}", "x-destructive": true, "type": "object", "properties": { "entityType": { "type": "string", "description": "", "x-found-in": "path" }, "id": { "type": "string", "description": "Identifier of the entity to be deleted, commonly entity.id value.", "x-found-in": "body" } }, "required": ["entityType", "id"] }

package/lib/cjs/kibana/json/security-entity-analytics-api.find-asset-criticality-records.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "FindAssetCriticalityRecords", "x-api": { "id": "security-entity-analytics-api.find-asset-criticality-records", "name": "find-asset-criticality-records", "namespace": "security-entity-analytics-api" }, "x-method": "GET", "x-path": "/api/asset_criticality/list", "x-destructive": false, "type": "object", "properties": { "sort_field": { "enum": ["id_value", "id_field", "criticality_level", "@timestamp"], "description": "The field to sort by.", "x-found-in": "query" }, "sort_direction": { "enum": ["asc", "desc"], "description": "The order to sort by.", "x-found-in": "query" }, "page": { "type": "number", "description": "The page number to return.", "x-found-in": "query" }, "per_page": { "type": "number", "description": "The number of records to return per page.", "x-found-in": "query" }, "kuery": { "type": "string", "description": "The kuery to filter by.", "x-found-in": "query" } } }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "find-asset-criticality-records", "x-api": { "id": "security-entity-analytics-api.find-asset-criticality-records", "name": "find-asset-criticality-records", "namespace": "security-entity-analytics-api" }, "x-method": "GET", "x-path": "/api/asset_criticality/list", "x-destructive": false, "type": "object", "properties": { "sort_field": { "enum": ["id_value", "id_field", "criticality_level", "@timestamp"], "description": "The field to sort by.", "x-found-in": "query" }, "sort_direction": { "enum": ["asc", "desc"], "description": "The order to sort by.", "x-found-in": "query" }, "page": { "type": "number", "description": "The page number to return.", "x-found-in": "query" }, "per_page": { "type": "number", "description": "The number of records to return per page.", "x-found-in": "query" }, "kuery": { "type": "string", "description": "The kuery to filter by.", "x-found-in": "query" } } }

package/lib/cjs/kibana/json/security-entity-analytics-api.get-asset-criticality-record.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "GetAssetCriticalityRecord", "x-api": { "id": "security-entity-analytics-api.get-asset-criticality-record", "name": "get-asset-criticality-record", "namespace": "security-entity-analytics-api" }, "x-method": "GET", "x-path": "/api/asset_criticality", "x-destructive": false, "type": "object", "properties": { "id_value": { "type": "string", "description": "The ID value of the asset.", "x-found-in": "query" }, "id_field": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_IdField", "description": "The field representing the ID.", "x-found-in": "query" } }, "required": ["id_value", "id_field"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "get-asset-criticality-record", "x-api": { "id": "security-entity-analytics-api.get-asset-criticality-record", "name": "get-asset-criticality-record", "namespace": "security-entity-analytics-api" }, "x-method": "GET", "x-path": "/api/asset_criticality", "x-destructive": false, "type": "object", "properties": { "id_value": { "type": "string", "description": "The ID value of the asset.", "x-found-in": "query" }, "id_field": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_IdField", "description": "The field representing the ID.", "x-found-in": "query" } }, "required": ["id_value", "id_field"] }

package/lib/cjs/kibana/json/security-entity-analytics-api.get-entity-engine.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "GetEntityEngine", "x-api": { "id": "security-entity-analytics-api.get-entity-engine", "name": "get-entity-engine", "namespace": "security-entity-analytics-api" }, "x-method": "GET", "x-path": "/api/entity_store/engines/{entityType}", "x-destructive": false, "type": "object", "properties": { "entityType": { "type": "string", "description": "The entity type of the engine.", "x-found-in": "path" } }, "required": ["entityType"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "get-entity-engine", "x-api": { "id": "security-entity-analytics-api.get-entity-engine", "name": "get-entity-engine", "namespace": "security-entity-analytics-api" }, "x-method": "GET", "x-path": "/api/entity_store/engines/{entityType}", "x-destructive": false, "type": "object", "properties": { "entityType": { "type": "string", "description": "The entity type of the engine.", "x-found-in": "path" } }, "required": ["entityType"] }

package/lib/cjs/kibana/json/security-entity-analytics-api.get-entity-store-status.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "GetEntityStoreStatus", "x-api": { "id": "security-entity-analytics-api.get-entity-store-status", "name": "get-entity-store-status", "namespace": "security-entity-analytics-api" }, "x-method": "GET", "x-path": "/api/entity_store/status", "x-destructive": false, "type": "object", "properties": { "include_components": { "type": "boolean", "description": "If true, returns a detailed status of each engine including all its components.", "x-found-in": "query" } } }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "get-entity-store-status", "x-api": { "id": "security-entity-analytics-api.get-entity-store-status", "name": "get-entity-store-status", "namespace": "security-entity-analytics-api" }, "x-method": "GET", "x-path": "/api/entity_store/status", "x-destructive": false, "type": "object", "properties": { "include_components": { "type": "boolean", "description": "If true, returns a detailed status of each engine including all its components.", "x-found-in": "query" } } }

package/lib/cjs/kibana/json/security-entity-analytics-api.get-risk-score-history.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "GetRiskScoreHistory", "x-api": { "id": "security-entity-analytics-api.get-risk-score-history", "name": "get-risk-score-history", "namespace": "security-entity-analytics-api" }, "x-method": "GET", "x-path": "/api/risk_score/history", "x-destructive": false, "type": "object", "properties": { "entity_type": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_IdentifierType", "description": "The type of entity to retrieve history for.", "x-found-in": "query" }, "entity_id": { "type": "string", "description": "The identifier of the entity to retrieve history for.", "x-found-in": "query" }, "from": { "type": "string", "description": "Start of the time range, in date-math syntax. Defaults to 90 days ago.", "x-found-in": "query" }, "to": { "type": "string", "description": "End of the time range, in date-math syntax. Defaults to now.", "x-found-in": "query" }, "score_type": { "enum": ["base", "propagated", "resolution"], "description": "Filter entries by the type of score recorded (`base`, `propagated`, or `resolution`).", "x-found-in": "query" }, "page_size": { "type": "number", "description": "Maximum number of history entries to return per request.", "x-found-in": "query" } }, "required": ["entity_type", "entity_id"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "get-risk-score-history", "x-api": { "id": "security-entity-analytics-api.get-risk-score-history", "name": "get-risk-score-history", "namespace": "security-entity-analytics-api" }, "x-method": "GET", "x-path": "/api/risk_score/history", "x-destructive": false, "type": "object", "properties": { "entity_type": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_IdentifierType", "description": "The type of entity to retrieve history for.", "x-found-in": "query" }, "entity_id": { "type": "string", "description": "The identifier of the entity to retrieve history for.", "x-found-in": "query" }, "from": { "type": "string", "description": "Start of the time range, in date-math syntax. Defaults to 90 days ago.", "x-found-in": "query" }, "to": { "type": "string", "description": "End of the time range, in date-math syntax. Defaults to now.", "x-found-in": "query" }, "score_type": { "enum": ["base", "propagated", "resolution"], "description": "Filter entries by the type of score recorded (`base`, `propagated`, or `resolution`).", "x-found-in": "query" }, "page_size": { "type": "number", "description": "Maximum number of history entries to return per request.", "x-found-in": "query" } }, "required": ["entity_type", "entity_id"] }

package/lib/cjs/kibana/json/security-entity-analytics-api.get-watchlist.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "GetWatchlist", "x-api": { "id": "security-entity-analytics-api.get-watchlist", "name": "get-watchlist", "namespace": "security-entity-analytics-api" }, "x-method": "GET", "x-path": "/api/entity_analytics/watchlists/{id}", "x-destructive": false, "x-availability": { "serverless": { "stability": "tech_preview" } }, "type": "object", "properties": { "id": { "type": "string", "description": "Unique ID of the watchlist", "x-found-in": "path" } }, "required": ["id"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "get-watchlist", "x-api": { "id": "security-entity-analytics-api.get-watchlist", "name": "get-watchlist", "namespace": "security-entity-analytics-api" }, "x-method": "GET", "x-path": "/api/entity_analytics/watchlists/{id}", "x-destructive": false, "x-availability": { "serverless": { "stability": "tech_preview" } }, "type": "object", "properties": { "id": { "type": "string", "description": "Unique ID of the watchlist", "x-found-in": "path" } }, "required": ["id"] }

package/lib/cjs/kibana/json/security-entity-analytics-api.init-entity-engine.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "InitEntityEngine", "x-api": { "id": "security-entity-analytics-api.init-entity-engine", "name": "init-entity-engine", "namespace": "security-entity-analytics-api" }, "x-method": "POST", "x-path": "/api/entity_store/engines/{entityType}/init", "x-destructive": true, "type": "object", "properties": { "entityType": { "type": "string", "description": "The entity type of the engine.", "x-found-in": "path" }, "delay": { "type": "string", "description": "The delay before the transform will run.", "x-found-in": "body" }, "docsPerSecond": { "type": "number", "description": "The number of documents per second to process.", "x-found-in": "body" }, "enrichPolicyExecutionInterval": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_Interval", "x-found-in": "body" }, "fieldHistoryLength": { "type": "number", "description": "The number of historical values to keep for each field.", "x-found-in": "body" }, "filter": { "type": "string", "x-found-in": "body" }, "frequency": { "type": "string", "description": "The frequency at which the transform will run.", "x-found-in": "body" }, "indexPattern": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_IndexPattern", "x-found-in": "body" }, "lookbackPeriod": { "type": "string", "description": "The amount of time the transform looks back to calculate the aggregations.", "x-found-in": "body" }, "maxPageSearchSize": { "type": "number", "description": "The initial page size to use for the composite aggregation of each checkpoint.", "x-found-in": "body" }, "timeout": { "type": "string", "description": "The timeout for initializing the aggregating transform.", "x-found-in": "body" }, "timestampField": { "type": "string", "description": "The field to use as the timestamp for the entity type.", "x-found-in": "body" } }, "required": ["entityType"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "init-entity-engine", "x-api": { "id": "security-entity-analytics-api.init-entity-engine", "name": "init-entity-engine", "namespace": "security-entity-analytics-api" }, "x-method": "POST", "x-path": "/api/entity_store/engines/{entityType}/init", "x-destructive": true, "type": "object", "properties": { "entityType": { "type": "string", "description": "The entity type of the engine.", "x-found-in": "path" }, "delay": { "type": "string", "description": "The delay before the transform will run.", "x-found-in": "body" }, "docsPerSecond": { "type": "number", "description": "The number of documents per second to process.", "x-found-in": "body" }, "enrichPolicyExecutionInterval": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_Interval", "x-found-in": "body" }, "fieldHistoryLength": { "type": "number", "description": "The number of historical values to keep for each field.", "x-found-in": "body" }, "filter": { "type": "string", "x-found-in": "body" }, "frequency": { "type": "string", "description": "The frequency at which the transform will run.", "x-found-in": "body" }, "indexPattern": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_IndexPattern", "x-found-in": "body" }, "lookbackPeriod": { "type": "string", "description": "The amount of time the transform looks back to calculate the aggregations.", "x-found-in": "body" }, "maxPageSearchSize": { "type": "number", "description": "The initial page size to use for the composite aggregation of each checkpoint.", "x-found-in": "body" }, "timeout": { "type": "string", "description": "The timeout for initializing the aggregating transform.", "x-found-in": "body" }, "timestampField": { "type": "string", "description": "The field to use as the timestamp for the entity type.", "x-found-in": "body" } }, "required": ["entityType"] }

package/lib/cjs/kibana/json/security-entity-analytics-api.init-entity-store.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "InitEntityStore", "x-api": { "id": "security-entity-analytics-api.init-entity-store", "name": "init-entity-store", "namespace": "security-entity-analytics-api" }, "x-method": "POST", "x-path": "/api/entity_store/enable", "x-destructive": true, "type": "object", "properties": { "delay": { "type": "string", "description": "The delay before the transform will run.", "x-found-in": "body" }, "docsPerSecond": { "type": "number", "description": "The number of documents per second to process.", "x-found-in": "body" }, "enrichPolicyExecutionInterval": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_Interval", "x-found-in": "body" }, "entityTypes": { "type": "array", "items": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_EntityType" }, "x-found-in": "body" }, "fieldHistoryLength": { "type": "number", "description": "The number of historical values to keep for each field.", "x-found-in": "body" }, "filter": { "type": "string", "x-found-in": "body" }, "frequency": { "type": "string", "description": "The frequency at which the transform will run.", "x-found-in": "body" }, "indexPattern": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_IndexPattern", "x-found-in": "body" }, "lookbackPeriod": { "type": "string", "description": "The amount of time the transform looks back to calculate the aggregations.", "x-found-in": "body" }, "maxPageSearchSize": { "type": "number", "description": "The initial page size to use for the composite aggregation of each checkpoint.", "x-found-in": "body" }, "timeout": { "type": "string", "description": "The timeout for initializing the aggregating transform.", "x-found-in": "body" }, "timestampField": { "type": "string", "description": "The field to use as the timestamp.", "x-found-in": "body" } } }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "init-entity-store", "x-api": { "id": "security-entity-analytics-api.init-entity-store", "name": "init-entity-store", "namespace": "security-entity-analytics-api" }, "x-method": "POST", "x-path": "/api/entity_store/enable", "x-destructive": true, "type": "object", "properties": { "delay": { "type": "string", "description": "The delay before the transform will run.", "x-found-in": "body" }, "docsPerSecond": { "type": "number", "description": "The number of documents per second to process.", "x-found-in": "body" }, "enrichPolicyExecutionInterval": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_Interval", "x-found-in": "body" }, "entityTypes": { "type": "array", "items": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_EntityType" }, "x-found-in": "body" }, "fieldHistoryLength": { "type": "number", "description": "The number of historical values to keep for each field.", "x-found-in": "body" }, "filter": { "type": "string", "x-found-in": "body" }, "frequency": { "type": "string", "description": "The frequency at which the transform will run.", "x-found-in": "body" }, "indexPattern": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_IndexPattern", "x-found-in": "body" }, "lookbackPeriod": { "type": "string", "description": "The amount of time the transform looks back to calculate the aggregations.", "x-found-in": "body" }, "maxPageSearchSize": { "type": "number", "description": "The initial page size to use for the composite aggregation of each checkpoint.", "x-found-in": "body" }, "timeout": { "type": "string", "description": "The timeout for initializing the aggregating transform.", "x-found-in": "body" }, "timestampField": { "type": "string", "description": "The field to use as the timestamp.", "x-found-in": "body" } } }

package/lib/cjs/kibana/json/security-entity-analytics-api.list-entities.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "ListEntities", "x-api": { "id": "security-entity-analytics-api.list-entities", "name": "list-entities", "namespace": "security-entity-analytics-api" }, "x-method": "GET", "x-path": "/api/entity_store/entities/list", "x-destructive": false, "type": "object", "properties": { "sort_field": { "type": "string", "description": "Field to sort results by.", "x-found-in": "query" }, "sort_order": { "enum": ["asc", "desc"], "description": "Sort order.", "x-found-in": "query" }, "page": { "type": "number", "description": "Page number to return (1-indexed).", "x-found-in": "query" }, "per_page": { "type": "number", "description": "Number of entities per page.", "x-found-in": "query" }, "filterQuery": { "type": "string", "description": "An ES query to filter by.", "x-found-in": "query" }, "entity_types": { "type": "array", "items": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_EntityType" }, "description": "Entity types to include in the results.", "x-found-in": "query" } }, "required": ["entity_types"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "list-entities", "x-api": { "id": "security-entity-analytics-api.list-entities", "name": "list-entities", "namespace": "security-entity-analytics-api" }, "x-method": "GET", "x-path": "/api/entity_store/entities/list", "x-destructive": false, "type": "object", "properties": { "sort_field": { "type": "string", "description": "Field to sort results by.", "x-found-in": "query" }, "sort_order": { "enum": ["asc", "desc"], "description": "Sort order.", "x-found-in": "query" }, "page": { "type": "number", "description": "Page number to return (1-indexed).", "x-found-in": "query" }, "per_page": { "type": "number", "description": "Number of entities per page.", "x-found-in": "query" }, "filterQuery": { "type": "string", "description": "An ES query to filter by.", "x-found-in": "query" }, "entity_types": { "type": "array", "items": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_EntityType" }, "description": "Entity types to include in the results.", "x-found-in": "query" } }, "required": ["entity_types"] }

package/lib/cjs/kibana/json/security-entity-analytics-api.list-priv-mon-users.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "ListPrivMonUsers", "x-api": { "id": "security-entity-analytics-api.list-priv-mon-users", "name": "list-priv-mon-users", "namespace": "security-entity-analytics-api" }, "x-method": "GET", "x-path": "/api/entity_analytics/monitoring/users/list", "x-destructive": false, "type": "object", "properties": { "kql": { "type": "string", "description": "KQL query to filter the list of monitored users", "x-found-in": "query" } } }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "list-priv-mon-users", "x-api": { "id": "security-entity-analytics-api.list-priv-mon-users", "name": "list-priv-mon-users", "namespace": "security-entity-analytics-api" }, "x-method": "GET", "x-path": "/api/entity_analytics/monitoring/users/list", "x-destructive": false, "type": "object", "properties": { "kql": { "type": "string", "description": "KQL query to filter the list of monitored users", "x-found-in": "query" } } }

package/lib/cjs/kibana/json/security-entity-analytics-api.start-entity-engine.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "StartEntityEngine", "x-api": { "id": "security-entity-analytics-api.start-entity-engine", "name": "start-entity-engine", "namespace": "security-entity-analytics-api" }, "x-method": "POST", "x-path": "/api/entity_store/engines/{entityType}/start", "x-destructive": true, "type": "object", "properties": { "entityType": { "type": "string", "description": "The entity type of the engine to start.", "x-found-in": "path" } }, "required": ["entityType"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "start-entity-engine", "x-api": { "id": "security-entity-analytics-api.start-entity-engine", "name": "start-entity-engine", "namespace": "security-entity-analytics-api" }, "x-method": "POST", "x-path": "/api/entity_store/engines/{entityType}/start", "x-destructive": true, "type": "object", "properties": { "entityType": { "type": "string", "description": "The entity type of the engine to start.", "x-found-in": "path" } }, "required": ["entityType"] }

package/lib/cjs/kibana/json/security-entity-analytics-api.stop-entity-engine.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "StopEntityEngine", "x-api": { "id": "security-entity-analytics-api.stop-entity-engine", "name": "stop-entity-engine", "namespace": "security-entity-analytics-api" }, "x-method": "POST", "x-path": "/api/entity_store/engines/{entityType}/stop", "x-destructive": true, "type": "object", "properties": { "entityType": { "type": "string", "description": "The entity type of the engine to stop.", "x-found-in": "path" } }, "required": ["entityType"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "stop-entity-engine", "x-api": { "id": "security-entity-analytics-api.stop-entity-engine", "name": "stop-entity-engine", "namespace": "security-entity-analytics-api" }, "x-method": "POST", "x-path": "/api/entity_store/engines/{entityType}/stop", "x-destructive": true, "type": "object", "properties": { "entityType": { "type": "string", "description": "The entity type of the engine to stop.", "x-found-in": "path" } }, "required": ["entityType"] }

package/lib/cjs/kibana/json/security-entity-analytics-api.unassign-watchlist-entities.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "UnassignWatchlistEntities", "x-api": { "id": "security-entity-analytics-api.unassign-watchlist-entities", "name": "unassign-watchlist-entities", "namespace": "security-entity-analytics-api" }, "x-method": "POST", "x-path": "/api/entity_analytics/watchlists/{watchlist_id}/entities/unassign", "x-destructive": true, "x-availability": { "serverless": { "stability": "tech_preview", "since": "9.4.0" } }, "type": "object", "properties": { "watchlist_id": { "type": "string", "description": "The ID of the watchlist to remove entities from", "x-found-in": "path" }, "euids": { "type": "array", "items": { "type": "string" }, "description": "The EUIDs of the entities to unassign", "x-found-in": "body" } }, "required": ["watchlist_id", "euids"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "unassign-watchlist-entities", "x-api": { "id": "security-entity-analytics-api.unassign-watchlist-entities", "name": "unassign-watchlist-entities", "namespace": "security-entity-analytics-api" }, "x-method": "POST", "x-path": "/api/entity_analytics/watchlists/{watchlist_id}/entities/unassign", "x-destructive": true, "x-availability": { "serverless": { "stability": "tech_preview", "since": "9.4.0" } }, "type": "object", "properties": { "watchlist_id": { "type": "string", "description": "The ID of the watchlist to remove entities from", "x-found-in": "path" }, "euids": { "type": "array", "items": { "type": "string" }, "description": "The EUIDs of the entities to unassign", "x-found-in": "body" } }, "required": ["watchlist_id", "euids"] }

package/lib/cjs/kibana/json/security-entity-analytics-api.update-priv-mon-user.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "UpdatePrivMonUser", "x-api": { "id": "security-entity-analytics-api.update-priv-mon-user", "name": "update-priv-mon-user", "namespace": "security-entity-analytics-api" }, "x-method": "PUT", "x-path": "/api/entity_analytics/monitoring/users/{id}", "x-destructive": true, "type": "object", "properties": { "id": { "type": "string", "description": "The document ID of the monitored user to update", "x-found-in": "path" }, "body": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_MonitoredUserUpdateDoc", "x-found-in": "body", "x-body-root": true } }, "required": ["id"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "update-priv-mon-user", "x-api": { "id": "security-entity-analytics-api.update-priv-mon-user", "name": "update-priv-mon-user", "namespace": "security-entity-analytics-api" }, "x-method": "PUT", "x-path": "/api/entity_analytics/monitoring/users/{id}", "x-destructive": true, "type": "object", "properties": { "id": { "type": "string", "description": "The document ID of the monitored user to update", "x-found-in": "path" }, "body": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_MonitoredUserUpdateDoc", "x-found-in": "body", "x-body-root": true } }, "required": ["id"] }

package/lib/cjs/kibana/json/security-entity-analytics-api.update-watchlist.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "UpdateWatchlist", "x-api": { "id": "security-entity-analytics-api.update-watchlist", "name": "update-watchlist", "namespace": "security-entity-analytics-api" }, "x-method": "PUT", "x-path": "/api/entity_analytics/watchlists/{id}", "x-destructive": true, "x-availability": { "serverless": { "stability": "tech_preview" } }, "type": "object", "properties": { "id": { "type": "string", "description": "The ID of the watchlist to update", "x-found-in": "path" }, "description": { "type": "string", "description": "Description of the watchlist", "x-found-in": "body" }, "managed": { "type": "boolean", "description": "Indicates if the watchlist is managed by the system", "x-found-in": "body" }, "name": { "type": "string", "description": "Unique name of the watchlist", "x-found-in": "body" }, "riskModifier": { "type": "number", "description": "Risk score modifier associated with the watchlist", "x-found-in": "body" } }, "required": ["id", "name", "riskModifier"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "update-watchlist", "x-api": { "id": "security-entity-analytics-api.update-watchlist", "name": "update-watchlist", "namespace": "security-entity-analytics-api" }, "x-method": "PUT", "x-path": "/api/entity_analytics/watchlists/{id}", "x-destructive": true, "x-availability": { "serverless": { "stability": "tech_preview" } }, "type": "object", "properties": { "id": { "type": "string", "description": "The ID of the watchlist to update", "x-found-in": "path" }, "description": { "type": "string", "description": "Description of the watchlist", "x-found-in": "body" }, "managed": { "type": "boolean", "description": "Indicates if the watchlist is managed by the system", "x-found-in": "body" }, "name": { "type": "string", "description": "Unique name of the watchlist", "x-found-in": "body" }, "riskModifier": { "type": "number", "description": "Risk score modifier associated with the watchlist", "x-found-in": "body" } }, "required": ["id", "name", "riskModifier"] }

package/lib/cjs/kibana/json/security-entity-analytics-api.upsert-entities-bulk.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "UpsertEntitiesBulk", "x-api": { "id": "security-entity-analytics-api.upsert-entities-bulk", "name": "upsert-entities-bulk", "namespace": "security-entity-analytics-api" }, "x-method": "PUT", "x-path": "/api/entity_store/entities/bulk", "x-destructive": true, "type": "object", "properties": { "force": { "type": "boolean", "description": "When true, allows updating protected fields.", "x-found-in": "query" }, "body": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_EntitiesContainer", "x-found-in": "body", "x-body-root": true } } }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "upsert-entities-bulk", "x-api": { "id": "security-entity-analytics-api.upsert-entities-bulk", "name": "upsert-entities-bulk", "namespace": "security-entity-analytics-api" }, "x-method": "PUT", "x-path": "/api/entity_store/entities/bulk", "x-destructive": true, "type": "object", "properties": { "force": { "type": "boolean", "description": "When true, allows updating protected fields.", "x-found-in": "query" }, "body": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_EntitiesContainer", "x-found-in": "body", "x-body-root": true } } }

package/lib/cjs/kibana/json/security-entity-analytics-api.upsert-entity.request.json

@@ -1 +1 @@
-{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "UpsertEntity", "x-api": { "id": "security-entity-analytics-api.upsert-entity", "name": "upsert-entity", "namespace": "security-entity-analytics-api" }, "x-method": "PUT", "x-path": "/api/entity_store/entities/{entityType}", "x-destructive": true, "type": "object", "properties": { "entityType": { "type": "string", "description": "", "x-found-in": "path" }, "force": { "type": "boolean", "description": "When true, allows updating protected fields.", "x-found-in": "query" }, "body": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_Entity", "x-found-in": "body", "x-body-root": true } }, "required": ["entityType"] }
+{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "upsert-entity", "x-api": { "id": "security-entity-analytics-api.upsert-entity", "name": "upsert-entity", "namespace": "security-entity-analytics-api" }, "x-method": "PUT", "x-path": "/api/entity_store/entities/{entityType}", "x-destructive": true, "type": "object", "properties": { "entityType": { "type": "string", "description": "", "x-found-in": "path" }, "force": { "type": "boolean", "description": "When true, allows updating protected fields.", "x-found-in": "query" }, "body": { "$ref": "./_defs.json#/$defs/Security_Entity_Analytics_API_Entity", "x-found-in": "body", "x-body-root": true } }, "required": ["entityType"] }