npm - @elastic/schemas - Versions diffs - 0.7.1 → 0.7.3 - Mend

@elastic/schemas 0.7.1 → 0.7.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1265) hide show

package/lib/kibana/json/security-entity-store.put-security-entity-store-entities-bulk.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- { "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-security-entity-store-entities-bulk", "x-api": { "id": "security-entity-store.put-security-entity-store-entities-bulk", "name": "put-security-entity-store-entities-bulk", "namespace": "security-entity-store" }, "x-method": "PUT", "x-path": "/api/security/entity_store/entities/bulk", "x-destructive": true, "type": "object", "properties": { "force": { "oneOf": [{ "enum": ["true", "false"] }, { "type": "boolean" }], "description": "When true, allows updating protected fields.", "x-found-in": "query" }, "entities": { "type": "array", "items": { "type": "object", "properties": { "doc": { "oneOf": [{ "type": "object", "properties": { "@timestamp": { "type": "string" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } } }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } } }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } } }, "labels": { "type": "object", "properties": {}, "additionalProperties": {} }, "tags": { "type": "array", "items": { "type": "string" } }, "user": { "type": "object", "properties": { "domain": { "type": "array", "items": { "type": "string" } }, "email": { "type": "array", "items": { "type": "string" } }, "full_name": { "type": "array", "items": { "type": "string" } }, "hash": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "roles": { "type": "array", "items": { "type": "string" } } } } } }, { "type": "object", "properties": { "@timestamp": { "type": "string" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } } }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } } }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } } }, "host": { "type": "object", "properties": { "architecture": { "type": "array", "items": { "type": "string" } }, "domain": { "type": "array", "items": { "type": "string" } }, "hostname": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "ip": { "type": "array", "items": { "type": "string" } }, "mac": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "os": { "type": "object", "properties": { "family": { "type": "string" }, "full": { "type": "string" }, "kernel": { "type": "string" }, "name": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "platform": { "type": "string" }, "type": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "version": { "type": "string" } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "type": { "type": "array", "items": { "type": "string" } } } }, "labels": { "type": "object", "properties": {}, "additionalProperties": {} }, "tags": { "type": "array", "items": { "type": "string" } } } }, { "type": "object", "properties": { "@timestamp": { "type": "string" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } } }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } } }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } } }, "labels": { "type": "object", "properties": {}, "additionalProperties": {} }, "service": { "type": "object", "properties": { "address": { "type": "string" }, "environment": { "type": "string" }, "ephemeral_id": { "type": "string" }, "id": { "type": "string" }, "name": { "type": "string" }, "node": { "type": "object", "properties": { "name": { "type": "string" }, "role": { "type": "string" }, "roles": { "type": "array", "items": { "type": "string" } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "state": { "type": "string" }, "type": { "type": "string" }, "version": { "type": "string" } } }, "tags": { "type": "array", "items": { "type": "string" } } } }, { "type": "object", "properties": { "@timestamp": { "type": "string" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } } }, "cloud": { "type": "object", "properties": { "account": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "availability_zone": { "type": "string" }, "instance": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "machine": { "type": "object", "properties": { "type": { "type": "string" } } }, "project": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "provider": { "type": "string" }, "region": { "type": "string" }, "service": { "type": "object", "properties": { "name": { "type": "string" } } } } }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } } }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } } }, "labels": { "type": "object", "properties": {}, "additionalProperties": {} }, "orchestrator": { "type": "object", "properties": { "api_version": { "type": "string" }, "cluster": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" }, "url": { "type": "string" }, "version": { "type": "string" } } }, "namespace": { "type": "string" }, "organization": { "type": "string" }, "resource": { "type": "object", "properties": { "annotation": { "type": "string" }, "id": { "type": "string" }, "ip": { "type": "string" }, "label": { "type": "string" }, "name": { "type": "string" }, "parent": { "type": "object", "properties": { "type": { "type": "string" } } }, "type": { "type": "string" } } }, "type": { "type": "string" } } }, "tags": { "type": "array", "items": { "type": "string" } } } }] }, "type": { "enum": ["user", "host", "service", "generic"], "description": "The entity type of this record." } }, "required": ["type"] }, "description": "The entities to update.", "x-found-in": "body" } }, "required": ["entities"] }
1	+ { "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-security-entity-store-entities-bulk", "x-api": { "id": "security-entity-store.put-security-entity-store-entities-bulk", "name": "put-security-entity-store-entities-bulk", "namespace": "security-entity-store" }, "x-method": "PUT", "x-path": "/api/security/entity_store/entities/bulk", "x-destructive": true, "type": "object", "properties": { "force": { "oneOf": [{ "enum": ["true", "false"] }, { "type": "boolean" }], "description": "When true, allows updating protected fields.", "x-found-in": "query" }, "entities": { "type": "array", "items": { "type": "object", "properties": { "doc": { "oneOf": [{ "type": "object", "properties": { "@timestamp": { "type": "string" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } } }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "created_by": { "type": "string" }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } } }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } } }, "labels": { "type": "object", "properties": {}, "additionalProperties": {} }, "tags": { "type": "array", "items": { "type": "string" } }, "user": { "type": "object", "properties": { "domain": { "type": "array", "items": { "type": "string" } }, "email": { "type": "array", "items": { "type": "string" } }, "full_name": { "type": "array", "items": { "type": "string" } }, "hash": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "roles": { "type": "array", "items": { "type": "string" } } } } } }, { "type": "object", "properties": { "@timestamp": { "type": "string" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } } }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "created_by": { "type": "string" }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } } }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } } }, "host": { "type": "object", "properties": { "architecture": { "type": "array", "items": { "type": "string" } }, "domain": { "type": "array", "items": { "type": "string" } }, "hostname": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "ip": { "type": "array", "items": { "type": "string" } }, "mac": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "os": { "type": "object", "properties": { "family": { "type": "string" }, "full": { "type": "string" }, "kernel": { "type": "string" }, "name": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "platform": { "type": "string" }, "type": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "version": { "type": "string" } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "type": { "type": "array", "items": { "type": "string" } } } }, "labels": { "type": "object", "properties": {}, "additionalProperties": {} }, "tags": { "type": "array", "items": { "type": "string" } } } }, { "type": "object", "properties": { "@timestamp": { "type": "string" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } } }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "created_by": { "type": "string" }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } } }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } } }, "labels": { "type": "object", "properties": {}, "additionalProperties": {} }, "service": { "type": "object", "properties": { "address": { "type": "string" }, "environment": { "type": "string" }, "ephemeral_id": { "type": "string" }, "id": { "type": "string" }, "name": { "type": "string" }, "node": { "type": "object", "properties": { "name": { "type": "string" }, "role": { "type": "string" }, "roles": { "type": "array", "items": { "type": "string" } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "state": { "type": "string" }, "type": { "type": "string" }, "version": { "type": "string" } } }, "tags": { "type": "array", "items": { "type": "string" } } } }, { "type": "object", "properties": { "@timestamp": { "type": "string" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } } }, "cloud": { "type": "object", "properties": { "account": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "availability_zone": { "type": "string" }, "instance": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "machine": { "type": "object", "properties": { "type": { "type": "string" } } }, "project": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "provider": { "type": "string" }, "region": { "type": "string" }, "service": { "type": "object", "properties": { "name": { "type": "string" } } } } }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "created_by": { "type": "string" }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } } }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } } }, "labels": { "type": "object", "properties": {}, "additionalProperties": {} }, "orchestrator": { "type": "object", "properties": { "api_version": { "type": "string" }, "cluster": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" }, "url": { "type": "string" }, "version": { "type": "string" } } }, "namespace": { "type": "string" }, "organization": { "type": "string" }, "resource": { "type": "object", "properties": { "annotation": { "type": "string" }, "id": { "type": "string" }, "ip": { "type": "string" }, "label": { "type": "string" }, "name": { "type": "string" }, "parent": { "type": "object", "properties": { "type": { "type": "string" } } }, "type": { "type": "string" } } }, "type": { "type": "string" } } }, "tags": { "type": "array", "items": { "type": "string" } } } }] }, "type": { "enum": ["user", "host", "service", "generic"], "description": "The entity type of this record." } }, "required": ["type"] }, "description": "The entities to update.", "x-found-in": "body" } }, "required": ["entities"] }

package/lib/kibana/json/security-entity-store.put-security-entity-store-entities-entitytype.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- { "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-security-entity-store-entities-entitytype", "x-api": { "id": "security-entity-store.put-security-entity-store-entities-entitytype", "name": "put-security-entity-store-entities-entitytype", "namespace": "security-entity-store" }, "x-method": "PUT", "x-path": "/api/security/entity_store/entities/{entityType}", "x-destructive": true, "type": "object", "properties": { "entityType": { "type": "string", "description": "The entity type to update.", "x-found-in": "path" }, "force": { "oneOf": [{ "enum": ["true", "false"] }, { "type": "boolean" }], "description": "When true, allows updating protected fields.", "x-found-in": "query" }, "@timestamp": { "type": "string", "x-found-in": "body" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } }, "x-found-in": "body" }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } }, "x-found-in": "body" }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } }, "x-found-in": "body" }, "labels": { "type": "object", "properties": {}, "additionalProperties": {}, "x-found-in": "body" }, "tags": { "type": "array", "items": { "type": "string" }, "x-found-in": "body" }, "user": { "type": "object", "properties": { "domain": { "type": "array", "items": { "type": "string" } }, "email": { "type": "array", "items": { "type": "string" } }, "full_name": { "type": "array", "items": { "type": "string" } }, "hash": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "roles": { "type": "array", "items": { "type": "string" } } }, "x-found-in": "body" }, "host": { "type": "object", "properties": { "architecture": { "type": "array", "items": { "type": "string" } }, "domain": { "type": "array", "items": { "type": "string" } }, "hostname": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "ip": { "type": "array", "items": { "type": "string" } }, "mac": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "os": { "type": "object", "properties": { "family": { "type": "string" }, "full": { "type": "string" }, "kernel": { "type": "string" }, "name": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "platform": { "type": "string" }, "type": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "version": { "type": "string" } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "type": { "type": "array", "items": { "type": "string" } } }, "x-found-in": "body" }, "service": { "type": "object", "properties": { "address": { "type": "string" }, "environment": { "type": "string" }, "ephemeral_id": { "type": "string" }, "id": { "type": "string" }, "name": { "type": "string" }, "node": { "type": "object", "properties": { "name": { "type": "string" }, "role": { "type": "string" }, "roles": { "type": "array", "items": { "type": "string" } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "state": { "type": "string" }, "type": { "type": "string" }, "version": { "type": "string" } }, "x-found-in": "body" }, "cloud": { "type": "object", "properties": { "account": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "availability_zone": { "type": "string" }, "instance": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "machine": { "type": "object", "properties": { "type": { "type": "string" } } }, "project": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "provider": { "type": "string" }, "region": { "type": "string" }, "service": { "type": "object", "properties": { "name": { "type": "string" } } } }, "x-found-in": "body" }, "orchestrator": { "type": "object", "properties": { "api_version": { "type": "string" }, "cluster": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" }, "url": { "type": "string" }, "version": { "type": "string" } } }, "namespace": { "type": "string" }, "organization": { "type": "string" }, "resource": { "type": "object", "properties": { "annotation": { "type": "string" }, "id": { "type": "string" }, "ip": { "type": "string" }, "label": { "type": "string" }, "name": { "type": "string" }, "parent": { "type": "object", "properties": { "type": { "type": "string" } } }, "type": { "type": "string" } } }, "type": { "type": "string" } }, "x-found-in": "body" } }, "required": ["entityType"] }
1	+ { "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-security-entity-store-entities-entitytype", "x-api": { "id": "security-entity-store.put-security-entity-store-entities-entitytype", "name": "put-security-entity-store-entities-entitytype", "namespace": "security-entity-store" }, "x-method": "PUT", "x-path": "/api/security/entity_store/entities/{entityType}", "x-destructive": true, "type": "object", "properties": { "entityType": { "type": "string", "description": "The entity type to update.", "x-found-in": "path" }, "force": { "oneOf": [{ "enum": ["true", "false"] }, { "type": "boolean" }], "description": "When true, allows updating protected fields.", "x-found-in": "query" }, "@timestamp": { "type": "string", "x-found-in": "body" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } }, "x-found-in": "body" }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "created_by": { "type": "string" }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } }, "x-found-in": "body" }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } }, "x-found-in": "body" }, "labels": { "type": "object", "properties": {}, "additionalProperties": {}, "x-found-in": "body" }, "tags": { "type": "array", "items": { "type": "string" }, "x-found-in": "body" }, "user": { "type": "object", "properties": { "domain": { "type": "array", "items": { "type": "string" } }, "email": { "type": "array", "items": { "type": "string" } }, "full_name": { "type": "array", "items": { "type": "string" } }, "hash": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "roles": { "type": "array", "items": { "type": "string" } } }, "x-found-in": "body" }, "host": { "type": "object", "properties": { "architecture": { "type": "array", "items": { "type": "string" } }, "domain": { "type": "array", "items": { "type": "string" } }, "hostname": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "ip": { "type": "array", "items": { "type": "string" } }, "mac": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "os": { "type": "object", "properties": { "family": { "type": "string" }, "full": { "type": "string" }, "kernel": { "type": "string" }, "name": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "platform": { "type": "string" }, "type": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "version": { "type": "string" } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "type": { "type": "array", "items": { "type": "string" } } }, "x-found-in": "body" }, "service": { "type": "object", "properties": { "address": { "type": "string" }, "environment": { "type": "string" }, "ephemeral_id": { "type": "string" }, "id": { "type": "string" }, "name": { "type": "string" }, "node": { "type": "object", "properties": { "name": { "type": "string" }, "role": { "type": "string" }, "roles": { "type": "array", "items": { "type": "string" } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "state": { "type": "string" }, "type": { "type": "string" }, "version": { "type": "string" } }, "x-found-in": "body" }, "cloud": { "type": "object", "properties": { "account": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "availability_zone": { "type": "string" }, "instance": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "machine": { "type": "object", "properties": { "type": { "type": "string" } } }, "project": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "provider": { "type": "string" }, "region": { "type": "string" }, "service": { "type": "object", "properties": { "name": { "type": "string" } } } }, "x-found-in": "body" }, "orchestrator": { "type": "object", "properties": { "api_version": { "type": "string" }, "cluster": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" }, "url": { "type": "string" }, "version": { "type": "string" } } }, "namespace": { "type": "string" }, "organization": { "type": "string" }, "resource": { "type": "object", "properties": { "annotation": { "type": "string" }, "id": { "type": "string" }, "ip": { "type": "string" }, "label": { "type": "string" }, "name": { "type": "string" }, "parent": { "type": "object", "properties": { "type": { "type": "string" } } }, "type": { "type": "string" } } }, "type": { "type": "string" } }, "x-found-in": "body" } }, "required": ["entityType"] }

package/lib/kibana/schemas/_index.d.ts CHANGED Viewed

@@ -1,4 +1,4 @@
-export { Cases_add_user_comment_request_properties, Cases_add_alert_comment_request_properties, Cases_add_case_comment_request } from './add_case_comment_default_space.js';
+export { Cases_add_user_comment_request_properties, Cases_add_alert_comment_request_properties, Cases_add_case_comment_request } from './add_case_comment.js';
 export { Security_Entity_Analytics_API_WatchlistEntityAssignResponseItem, AssignWatchlistEntitiesRequest, AssignWatchlistEntitiesResponse } from './assign_watchlist_entities.js';
 export { AttackDiscoveryFindResponse } from './attack_discovery_find.js';
 export { SLOs_bulk_delete_request, SLOs_bulk_delete_response } from './bulk_delete_op.js';
@@ -15,8 +15,8 @@ export { APM_UI_agent_keys_object, APM_UI_agent_keys_response } from './create_a
 export { APM_UI_create_annotation_object, APM_UI_create_annotation_response } from './create_annotation.js';
 export { CreateAssetCriticalityRecordRequest } from './create_asset_criticality_record.js';
 export { Security_Attack_discovery_API_AttackDiscoveryApiScheduleCreateProps } from './create_attack_discovery_schedules.js';
-export { Cases_create_case_request } from './create_case_default_space.js';
-export { CreateCaseTemplateDefaultSpaceResponse } from './create_case_template_default_space.js';
+export { Cases_create_case_request } from './create_case.js';
+export { CreateCaseTemplateResponse } from './create_case_template.js';
 export { Security_AI_Assistant_API_ConversationCreateProps } from './create_conversation.js';
 export { CreateDashboardRequest } from './create_dashboard.js';
 export { Data_views_create_data_view_request_object } from './create_data_view_defaultw.js';
@@ -92,10 +92,10 @@ export { ExportTimelinesRequest } from './export_timelines.js';
 export { FindAnonymizationFieldsResponse } from './find_anonymization_fields.js';
 export { FindAssetCriticalityRecordsResponse } from './find_asset_criticality_records.js';
 export { FindAttackDiscoverySchedulesResponse } from './find_attack_discovery_schedules.js';
-export { Cases_actions, Cases_payload_delete, Cases_payload_description, Cases_payload_tags, Cases_payload_title, Cases_payload_assignees, Cases_payload_severity, Cases_payload_status, Cases_payload_connector, Cases_payload_pushed, Cases_payload_alert_comment, Cases_payload_user_comment, Cases_payload_create_case, Cases_payload_settings, Cases_user_actions_find_response_properties, FindCaseActivityDefaultSpaceResponse } from './find_case_activity_default_space.js';
-export { Cases_find_comments_response } from './find_case_comments_default_space.js';
-export { FindCaseConnectorsDefaultSpaceResponse } from './find_case_connectors_default_space.js';
-export { FindCasesDefaultSpaceResponse } from './find_cases_default_space.js';
+export { Cases_actions, Cases_payload_delete, Cases_payload_description, Cases_payload_tags, Cases_payload_title, Cases_payload_assignees, Cases_payload_severity, Cases_payload_status, Cases_payload_connector, Cases_payload_pushed, Cases_payload_alert_comment, Cases_payload_user_comment, Cases_payload_create_case, Cases_payload_settings, Cases_user_actions_find_response_properties, FindCaseActivityResponse } from './find_case_activity.js';
+export { Cases_find_comments_response } from './find_case_comments.js';
+export { FindCaseConnectorsResponse } from './find_case_connectors.js';
+export { FindCasesResponse } from './find_cases.js';
 export { FindConversationsResponse } from './find_conversations.js';
 export { FindEndpointListItemsResponse } from './find_endpoint_list_items.js';
 export { FindExceptionListItemsResponse } from './find_exception_list_items.js';
@@ -125,14 +125,14 @@ export { GetAllDataViewsDefaultResponse } from './get_all_data_views_default.js'
 export { APM_UI_annotation_search_response } from './get_annotation.js';
 export { GetAttackDiscoveryGenerationResponse } from './get_attack_discovery_generation.js';
 export { GetAttackDiscoveryGenerationsResponse } from './get_attack_discovery_generations.js';
-export { Cases_alert_response_properties, GetCaseAlertsDefaultSpaceResponse } from './get_case_alerts_default_space.js';
-export { GetCaseCommentDefaultSpaceResponse } from './get_case_comment_default_space.js';
-export { GetCaseConfigurationDefaultSpaceResponse } from './get_case_configuration_default_space.js';
-export { Cases_case_response_get_case } from './get_case_default_space.js';
-export { GetCaseReportersDefaultSpaceResponse } from './get_case_reporters_default_space.js';
-export { GetCaseTagsDefaultSpaceResponse } from './get_case_tags_default_space.js';
-export { Cases_get_case_templates_response } from './get_case_templates_default_space.js';
-export { Cases_attachment_totals, Cases_related_case, GetCasesByAlertDefaultSpaceResponse } from './get_cases_by_alert_default_space.js';
+export { Cases_case_response_get_case } from './get_case.js';
+export { Cases_alert_response_properties, GetCaseAlertsResponse } from './get_case_alerts.js';
+export { GetCaseCommentResponse } from './get_case_comment.js';
+export { GetCaseConfigurationResponse } from './get_case_configuration.js';
+export { GetCaseReportersResponse } from './get_case_reporters.js';
+export { GetCaseTagsResponse } from './get_case_tags.js';
+export { Cases_get_case_templates_response } from './get_case_templates.js';
+export { Cases_attachment_totals, Cases_related_case, GetCasesByAlertResponse } from './get_cases_by_alert.js';
 export { GetDefaultDataViewDefaultResponse } from './get_default_data_view_default.js';
 export { SLOs_find_slo_definitions_response } from './get_definitions_op.js';
 export { Security_Endpoint_Management_API_EndpointMetadataResponse } from './get_endpoint_metadata.js';
@@ -162,6 +162,7 @@ export { GetFleetCloudConnectorsResponse } from './get_fleet_cloud_connectors.js
 export { GetFleetCloudConnectorsCloudconnectoridResponse } from './get_fleet_cloud_connectors_cloudconnectorid.js';
 export { GetFleetCloudConnectorsCloudconnectoridUsageResponse } from './get_fleet_cloud_connectors_cloudconnectorid_usage.js';
 export { GetFleetDataStreamsResponse } from './get_fleet_data_streams.js';
+export { GetFleetDataStreamsDataResponse } from './get_fleet_data_streams_data.js';
 export { Kibana_HTTP_APIs_get_enrollment_api_keys_response } from './get_fleet_enrollment_api_keys.js';
 export { Kibana_HTTP_APIs_enrollment_api_key_response } from './get_fleet_enrollment_api_keys_keyid.js';
 export { Kibana_HTTP_APIs_category_summary_item, Kibana_HTTP_APIs_get_categories_response } from './get_fleet_epm_categories.js';
@@ -351,7 +352,7 @@ export { PostFleetLogstashApiKeysResponse } from './post_fleet_logstash_api_keys
 export { PostFleetManagedIntegrationsUpgradeResponse } from './post_fleet_managed_integrations_upgrade.js';
 export { PostFleetManagedIntegrationsUpgradeDryrunResponse } from './post_fleet_managed_integrations_upgrade_dryrun.js';
 export { PostFleetMessageSigningServiceRotateKeyPairResponse } from './post_fleet_message_signing_service_rotate_key_pair.js';
-export { Kibana_HTTP_APIs_new_output_elasticsearch, Kibana_HTTP_APIs_new_output_kafka, Kibana_HTTP_APIs_new_output_logstash, Kibana_HTTP_APIs_new_output_remote_elasticsearch, PostFleetOutputsRequest, PostFleetOutputsResponse } from './post_fleet_outputs.js';
+export { Kibana_HTTP_APIs_new_output_otlp, Kibana_HTTP_APIs_new_output_elasticsearch, Kibana_HTTP_APIs_new_output_kafka, Kibana_HTTP_APIs_new_output_logstash, Kibana_HTTP_APIs_new_output_remote_elasticsearch, PostFleetOutputsRequest, PostFleetOutputsResponse } from './post_fleet_outputs.js';
 export { Kibana_HTTP_APIs_create_package_policy_request, Kibana_HTTP_APIs_create_package_policy_response, PostFleetPackagePoliciesRequest } from './post_fleet_package_policies.js';
 export { Kibana_HTTP_APIs_bulk_get_package_policies_response, PostFleetPackagePoliciesBulkGetRequest } from './post_fleet_package_policies_bulk_get.js';
 export { Kibana_HTTP_APIs_delete_package_policies_request, Kibana_HTTP_APIs_delete_package_policies_response_item, PostFleetPackagePoliciesDeleteResponse } from './post_fleet_package_policies_delete.js';
@@ -395,7 +396,7 @@ export { PreviewSwapDataViewsDefaultResponse } from './preview_swap_data_views_d
 export { PrivMonHealthResponse } from './priv_mon_health.js';
 export { Security_Entity_Analytics_API_EntityAnalyticsPrivilegesDetail, Security_Entity_Analytics_API_EntityAnalyticsPrivileges } from './priv_mon_privileges.js';
 export { Security_Entity_Analytics_API_PrivmonUserCsvUploadErrorItem, Security_Entity_Analytics_API_PrivmonUserCsvUploadStats, PrivmonBulkUploadUsersCSVResponse } from './privmon_bulk_upload_users_csv.js';
-export { PushCaseDefaultSpaceRequest } from './push_case_default_space.js';
+export { PushCaseRequest } from './push_case.js';
 export { defender_config, Kibana_HTTP_APIs_update_connector } from './put_actions_connector_id.js';
 export { PutAgentBuilderAgentsIdRequest } from './put_agent_builder_agents_id.js';
 export { PutAgentBuilderAgentsIdAccessControlRequest } from './put_agent_builder_agents_id_access_control.js';
@@ -411,7 +412,7 @@ export { PutFleetAgentsAgentidRequest, PutFleetAgentsAgentidResponse } from './p
 export { PutFleetCloudConnectorsCloudconnectoridRequest, PutFleetCloudConnectorsCloudconnectoridResponse } from './put_fleet_cloud_connectors_cloudconnectorid.js';
 export { PutFleetEpmCustomIntegrationsPkgnameRequest } from './put_fleet_epm_custom_integrations_pkgname.js';
 export { PutFleetFleetServerHostsItemidRequest, PutFleetFleetServerHostsItemidResponse } from './put_fleet_fleet_server_hosts_itemid.js';
-export { Kibana_HTTP_APIs_update_output_elasticsearch, Kibana_HTTP_APIs_update_output_kafka, Kibana_HTTP_APIs_update_output_logstash, Kibana_HTTP_APIs_update_output_remote_elasticsearch, PutFleetOutputsOutputidRequest, PutFleetOutputsOutputidResponse } from './put_fleet_outputs_outputid.js';
+export { Kibana_HTTP_APIs_update_output_otlp, Kibana_HTTP_APIs_update_output_elasticsearch, Kibana_HTTP_APIs_update_output_kafka, Kibana_HTTP_APIs_update_output_logstash, Kibana_HTTP_APIs_update_output_remote_elasticsearch, PutFleetOutputsOutputidRequest, PutFleetOutputsOutputidResponse } from './put_fleet_outputs_outputid.js';
 export { Kibana_HTTP_APIs_update_package_policy_request, PutFleetPackagePoliciesPackagepolicyidRequest, PutFleetPackagePoliciesPackagepolicyidResponse } from './put_fleet_package_policies_packagepolicyid.js';
 export { PutFleetProxiesItemidRequest, PutFleetProxiesItemidResponse } from './put_fleet_proxies_itemid.js';
 export { PutFleetSettingsRequest, PutFleetSettingsResponse } from './put_fleet_settings.js';
@@ -452,16 +453,16 @@ export { Security_Detections_API_RuntimeFieldType, Security_Detections_API_SetAl
 export { Security_Detections_API_SetAttacksAssigneesByIds, SetAttacksAssigneesResponse } from './set_attacks_assignees.js';
 export { Security_Detections_API_SetAttacksStatusByIdsBase, Security_Detections_API_CloseAttacksByIds, Security_Detections_API_SetAttacksStatusByIds, SetAttacksStatusResponse } from './set_attacks_status.js';
 export { Security_Detections_API_SetAttacksTagsByIds, SetAttacksTagsResponse } from './set_attacks_tags.js';
-export { Cases_set_case_configuration_request, SetCaseConfigurationDefaultSpaceResponse } from './set_case_configuration_default_space.js';
+export { Cases_set_case_configuration_request, SetCaseConfigurationResponse } from './set_case_configuration.js';
 export { SetDefaultDatailViewDefaultRequest, SetDefaultDatailViewDefaultResponse } from './set_default_datail_view_default.js';
 export { SwapDataViewsDefaultResponse } from './swap_data_views_default.js';
 export { Task_manager_health_Serverless_APIs_configuration, Task_manager_health_Serverless_APIs_workload, Task_manager_health_Serverless_APIs_health_response_serverless } from './task_manager_health.js';
 export { Security_Entity_Analytics_API_WatchlistEntityUnassignResponseItem, UnassignWatchlistEntitiesRequest, UnassignWatchlistEntitiesResponse } from './unassign_watchlist_entities.js';
 export { Security_Attack_discovery_API_AttackDiscoveryApiScheduleUpdateProps } from './update_attack_discovery_schedules.js';
-export { Cases_update_user_comment_request_properties, Cases_update_alert_comment_request_properties, Cases_update_case_comment_request } from './update_case_comment_default_space.js';
-export { Cases_update_case_configuration_request, UpdateCaseConfigurationDefaultSpaceResponse } from './update_case_configuration_default_space.js';
-export { Cases_case_close_sync_reason, Cases_update_case_request, UpdateCaseDefaultSpaceResponse } from './update_case_default_space.js';
-export { UpdateCaseTemplateDefaultSpaceResponse } from './update_case_template_default_space.js';
+export { Cases_case_close_sync_reason, Cases_update_case_request, UpdateCaseResponse } from './update_case.js';
+export { Cases_update_user_comment_request_properties, Cases_update_alert_comment_request_properties, Cases_update_case_comment_request } from './update_case_comment.js';
+export { Cases_update_case_configuration_request, UpdateCaseConfigurationResponse } from './update_case_configuration.js';
+export { UpdateCaseTemplateResponse } from './update_case_template.js';
 export { Security_AI_Assistant_API_ConversationUpdateProps } from './update_conversation.js';
 export { Data_views_update_data_view_request_object } from './update_data_view_default.js';
 export { UpdateEndpointListItemRequest } from './update_endpoint_list_item.js';