npm - @elastic/schemas - Versions diffs - 0.7.2 → 0.7.3 - Mend

@elastic/schemas 0.7.2 → 0.7.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (144) hide show

package/lib/kibana/json/security-entity-store.post-security-entity-store-entities-entitytype.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- { "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "post-security-entity-store-entities-entitytype", "x-api": { "id": "security-entity-store.post-security-entity-store-entities-entitytype", "name": "post-security-entity-store-entities-entitytype", "namespace": "security-entity-store" }, "x-method": "POST", "x-path": "/api/security/entity_store/entities/{entityType}", "x-destructive": false, "type": "object", "properties": { "entityType": { "type": "string", "description": "The entity type to create.", "x-found-in": "path" }, "@timestamp": { "type": "string", "x-found-in": "body" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } }, "x-found-in": "body" }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } }, "x-found-in": "body" }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } }, "x-found-in": "body" }, "labels": { "type": "object", "properties": {}, "additionalProperties": {}, "x-found-in": "body" }, "tags": { "type": "array", "items": { "type": "string" }, "x-found-in": "body" }, "user": { "type": "object", "properties": { "domain": { "type": "array", "items": { "type": "string" } }, "email": { "type": "array", "items": { "type": "string" } }, "full_name": { "type": "array", "items": { "type": "string" } }, "hash": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "roles": { "type": "array", "items": { "type": "string" } } }, "x-found-in": "body" }, "host": { "type": "object", "properties": { "architecture": { "type": "array", "items": { "type": "string" } }, "domain": { "type": "array", "items": { "type": "string" } }, "hostname": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "ip": { "type": "array", "items": { "type": "string" } }, "mac": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "os": { "type": "object", "properties": { "family": { "type": "string" }, "full": { "type": "string" }, "kernel": { "type": "string" }, "name": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "platform": { "type": "string" }, "type": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "version": { "type": "string" } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "type": { "type": "array", "items": { "type": "string" } } }, "x-found-in": "body" }, "service": { "type": "object", "properties": { "address": { "type": "string" }, "environment": { "type": "string" }, "ephemeral_id": { "type": "string" }, "id": { "type": "string" }, "name": { "type": "string" }, "node": { "type": "object", "properties": { "name": { "type": "string" }, "role": { "type": "string" }, "roles": { "type": "array", "items": { "type": "string" } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "state": { "type": "string" }, "type": { "type": "string" }, "version": { "type": "string" } }, "x-found-in": "body" }, "cloud": { "type": "object", "properties": { "account": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "availability_zone": { "type": "string" }, "instance": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "machine": { "type": "object", "properties": { "type": { "type": "string" } } }, "project": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "provider": { "type": "string" }, "region": { "type": "string" }, "service": { "type": "object", "properties": { "name": { "type": "string" } } } }, "x-found-in": "body" }, "orchestrator": { "type": "object", "properties": { "api_version": { "type": "string" }, "cluster": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" }, "url": { "type": "string" }, "version": { "type": "string" } } }, "namespace": { "type": "string" }, "organization": { "type": "string" }, "resource": { "type": "object", "properties": { "annotation": { "type": "string" }, "id": { "type": "string" }, "ip": { "type": "string" }, "label": { "type": "string" }, "name": { "type": "string" }, "parent": { "type": "object", "properties": { "type": { "type": "string" } } }, "type": { "type": "string" } } }, "type": { "type": "string" } }, "x-found-in": "body" } }, "required": ["entityType"] }
1	+ { "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "post-security-entity-store-entities-entitytype", "x-api": { "id": "security-entity-store.post-security-entity-store-entities-entitytype", "name": "post-security-entity-store-entities-entitytype", "namespace": "security-entity-store" }, "x-method": "POST", "x-path": "/api/security/entity_store/entities/{entityType}", "x-destructive": false, "type": "object", "properties": { "entityType": { "type": "string", "description": "The entity type to create.", "x-found-in": "path" }, "@timestamp": { "type": "string", "x-found-in": "body" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } }, "x-found-in": "body" }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "created_by": { "type": "string" }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } }, "x-found-in": "body" }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } }, "x-found-in": "body" }, "labels": { "type": "object", "properties": {}, "additionalProperties": {}, "x-found-in": "body" }, "tags": { "type": "array", "items": { "type": "string" }, "x-found-in": "body" }, "user": { "type": "object", "properties": { "domain": { "type": "array", "items": { "type": "string" } }, "email": { "type": "array", "items": { "type": "string" } }, "full_name": { "type": "array", "items": { "type": "string" } }, "hash": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "roles": { "type": "array", "items": { "type": "string" } } }, "x-found-in": "body" }, "host": { "type": "object", "properties": { "architecture": { "type": "array", "items": { "type": "string" } }, "domain": { "type": "array", "items": { "type": "string" } }, "hostname": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "ip": { "type": "array", "items": { "type": "string" } }, "mac": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "os": { "type": "object", "properties": { "family": { "type": "string" }, "full": { "type": "string" }, "kernel": { "type": "string" }, "name": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "platform": { "type": "string" }, "type": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "version": { "type": "string" } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "type": { "type": "array", "items": { "type": "string" } } }, "x-found-in": "body" }, "service": { "type": "object", "properties": { "address": { "type": "string" }, "environment": { "type": "string" }, "ephemeral_id": { "type": "string" }, "id": { "type": "string" }, "name": { "type": "string" }, "node": { "type": "object", "properties": { "name": { "type": "string" }, "role": { "type": "string" }, "roles": { "type": "array", "items": { "type": "string" } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "state": { "type": "string" }, "type": { "type": "string" }, "version": { "type": "string" } }, "x-found-in": "body" }, "cloud": { "type": "object", "properties": { "account": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "availability_zone": { "type": "string" }, "instance": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "machine": { "type": "object", "properties": { "type": { "type": "string" } } }, "project": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "provider": { "type": "string" }, "region": { "type": "string" }, "service": { "type": "object", "properties": { "name": { "type": "string" } } } }, "x-found-in": "body" }, "orchestrator": { "type": "object", "properties": { "api_version": { "type": "string" }, "cluster": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" }, "url": { "type": "string" }, "version": { "type": "string" } } }, "namespace": { "type": "string" }, "organization": { "type": "string" }, "resource": { "type": "object", "properties": { "annotation": { "type": "string" }, "id": { "type": "string" }, "ip": { "type": "string" }, "label": { "type": "string" }, "name": { "type": "string" }, "parent": { "type": "object", "properties": { "type": { "type": "string" } } }, "type": { "type": "string" } } }, "type": { "type": "string" } }, "x-found-in": "body" } }, "required": ["entityType"] }

package/lib/kibana/json/security-entity-store.put-security-entity-store-entities-bulk.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- { "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-security-entity-store-entities-bulk", "x-api": { "id": "security-entity-store.put-security-entity-store-entities-bulk", "name": "put-security-entity-store-entities-bulk", "namespace": "security-entity-store" }, "x-method": "PUT", "x-path": "/api/security/entity_store/entities/bulk", "x-destructive": true, "type": "object", "properties": { "force": { "oneOf": [{ "enum": ["true", "false"] }, { "type": "boolean" }], "description": "When true, allows updating protected fields.", "x-found-in": "query" }, "entities": { "type": "array", "items": { "type": "object", "properties": { "doc": { "oneOf": [{ "type": "object", "properties": { "@timestamp": { "type": "string" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } } }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } } }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } } }, "labels": { "type": "object", "properties": {}, "additionalProperties": {} }, "tags": { "type": "array", "items": { "type": "string" } }, "user": { "type": "object", "properties": { "domain": { "type": "array", "items": { "type": "string" } }, "email": { "type": "array", "items": { "type": "string" } }, "full_name": { "type": "array", "items": { "type": "string" } }, "hash": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "roles": { "type": "array", "items": { "type": "string" } } } } } }, { "type": "object", "properties": { "@timestamp": { "type": "string" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } } }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } } }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } } }, "host": { "type": "object", "properties": { "architecture": { "type": "array", "items": { "type": "string" } }, "domain": { "type": "array", "items": { "type": "string" } }, "hostname": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "ip": { "type": "array", "items": { "type": "string" } }, "mac": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "os": { "type": "object", "properties": { "family": { "type": "string" }, "full": { "type": "string" }, "kernel": { "type": "string" }, "name": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "platform": { "type": "string" }, "type": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "version": { "type": "string" } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "type": { "type": "array", "items": { "type": "string" } } } }, "labels": { "type": "object", "properties": {}, "additionalProperties": {} }, "tags": { "type": "array", "items": { "type": "string" } } } }, { "type": "object", "properties": { "@timestamp": { "type": "string" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } } }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } } }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } } }, "labels": { "type": "object", "properties": {}, "additionalProperties": {} }, "service": { "type": "object", "properties": { "address": { "type": "string" }, "environment": { "type": "string" }, "ephemeral_id": { "type": "string" }, "id": { "type": "string" }, "name": { "type": "string" }, "node": { "type": "object", "properties": { "name": { "type": "string" }, "role": { "type": "string" }, "roles": { "type": "array", "items": { "type": "string" } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "state": { "type": "string" }, "type": { "type": "string" }, "version": { "type": "string" } } }, "tags": { "type": "array", "items": { "type": "string" } } } }, { "type": "object", "properties": { "@timestamp": { "type": "string" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } } }, "cloud": { "type": "object", "properties": { "account": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "availability_zone": { "type": "string" }, "instance": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "machine": { "type": "object", "properties": { "type": { "type": "string" } } }, "project": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "provider": { "type": "string" }, "region": { "type": "string" }, "service": { "type": "object", "properties": { "name": { "type": "string" } } } } }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } } }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } } }, "labels": { "type": "object", "properties": {}, "additionalProperties": {} }, "orchestrator": { "type": "object", "properties": { "api_version": { "type": "string" }, "cluster": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" }, "url": { "type": "string" }, "version": { "type": "string" } } }, "namespace": { "type": "string" }, "organization": { "type": "string" }, "resource": { "type": "object", "properties": { "annotation": { "type": "string" }, "id": { "type": "string" }, "ip": { "type": "string" }, "label": { "type": "string" }, "name": { "type": "string" }, "parent": { "type": "object", "properties": { "type": { "type": "string" } } }, "type": { "type": "string" } } }, "type": { "type": "string" } } }, "tags": { "type": "array", "items": { "type": "string" } } } }] }, "type": { "enum": ["user", "host", "service", "generic"], "description": "The entity type of this record." } }, "required": ["type"] }, "description": "The entities to update.", "x-found-in": "body" } }, "required": ["entities"] }
1	+ { "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-security-entity-store-entities-bulk", "x-api": { "id": "security-entity-store.put-security-entity-store-entities-bulk", "name": "put-security-entity-store-entities-bulk", "namespace": "security-entity-store" }, "x-method": "PUT", "x-path": "/api/security/entity_store/entities/bulk", "x-destructive": true, "type": "object", "properties": { "force": { "oneOf": [{ "enum": ["true", "false"] }, { "type": "boolean" }], "description": "When true, allows updating protected fields.", "x-found-in": "query" }, "entities": { "type": "array", "items": { "type": "object", "properties": { "doc": { "oneOf": [{ "type": "object", "properties": { "@timestamp": { "type": "string" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } } }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "created_by": { "type": "string" }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } } }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } } }, "labels": { "type": "object", "properties": {}, "additionalProperties": {} }, "tags": { "type": "array", "items": { "type": "string" } }, "user": { "type": "object", "properties": { "domain": { "type": "array", "items": { "type": "string" } }, "email": { "type": "array", "items": { "type": "string" } }, "full_name": { "type": "array", "items": { "type": "string" } }, "hash": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "roles": { "type": "array", "items": { "type": "string" } } } } } }, { "type": "object", "properties": { "@timestamp": { "type": "string" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } } }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "created_by": { "type": "string" }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } } }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } } }, "host": { "type": "object", "properties": { "architecture": { "type": "array", "items": { "type": "string" } }, "domain": { "type": "array", "items": { "type": "string" } }, "hostname": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "ip": { "type": "array", "items": { "type": "string" } }, "mac": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "os": { "type": "object", "properties": { "family": { "type": "string" }, "full": { "type": "string" }, "kernel": { "type": "string" }, "name": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "platform": { "type": "string" }, "type": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "version": { "type": "string" } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "type": { "type": "array", "items": { "type": "string" } } } }, "labels": { "type": "object", "properties": {}, "additionalProperties": {} }, "tags": { "type": "array", "items": { "type": "string" } } } }, { "type": "object", "properties": { "@timestamp": { "type": "string" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } } }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "created_by": { "type": "string" }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } } }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } } }, "labels": { "type": "object", "properties": {}, "additionalProperties": {} }, "service": { "type": "object", "properties": { "address": { "type": "string" }, "environment": { "type": "string" }, "ephemeral_id": { "type": "string" }, "id": { "type": "string" }, "name": { "type": "string" }, "node": { "type": "object", "properties": { "name": { "type": "string" }, "role": { "type": "string" }, "roles": { "type": "array", "items": { "type": "string" } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "state": { "type": "string" }, "type": { "type": "string" }, "version": { "type": "string" } } }, "tags": { "type": "array", "items": { "type": "string" } } } }, { "type": "object", "properties": { "@timestamp": { "type": "string" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } } }, "cloud": { "type": "object", "properties": { "account": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "availability_zone": { "type": "string" }, "instance": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "machine": { "type": "object", "properties": { "type": { "type": "string" } } }, "project": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "provider": { "type": "string" }, "region": { "type": "string" }, "service": { "type": "object", "properties": { "name": { "type": "string" } } } } }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "created_by": { "type": "string" }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } } }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } } }, "labels": { "type": "object", "properties": {}, "additionalProperties": {} }, "orchestrator": { "type": "object", "properties": { "api_version": { "type": "string" }, "cluster": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" }, "url": { "type": "string" }, "version": { "type": "string" } } }, "namespace": { "type": "string" }, "organization": { "type": "string" }, "resource": { "type": "object", "properties": { "annotation": { "type": "string" }, "id": { "type": "string" }, "ip": { "type": "string" }, "label": { "type": "string" }, "name": { "type": "string" }, "parent": { "type": "object", "properties": { "type": { "type": "string" } } }, "type": { "type": "string" } } }, "type": { "type": "string" } } }, "tags": { "type": "array", "items": { "type": "string" } } } }] }, "type": { "enum": ["user", "host", "service", "generic"], "description": "The entity type of this record." } }, "required": ["type"] }, "description": "The entities to update.", "x-found-in": "body" } }, "required": ["entities"] }

package/lib/kibana/json/security-entity-store.put-security-entity-store-entities-entitytype.request.json CHANGED Viewed

	@@ -1 +1 @@
1	- { "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-security-entity-store-entities-entitytype", "x-api": { "id": "security-entity-store.put-security-entity-store-entities-entitytype", "name": "put-security-entity-store-entities-entitytype", "namespace": "security-entity-store" }, "x-method": "PUT", "x-path": "/api/security/entity_store/entities/{entityType}", "x-destructive": true, "type": "object", "properties": { "entityType": { "type": "string", "description": "The entity type to update.", "x-found-in": "path" }, "force": { "oneOf": [{ "enum": ["true", "false"] }, { "type": "boolean" }], "description": "When true, allows updating protected fields.", "x-found-in": "query" }, "@timestamp": { "type": "string", "x-found-in": "body" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } }, "x-found-in": "body" }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } }, "x-found-in": "body" }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } }, "x-found-in": "body" }, "labels": { "type": "object", "properties": {}, "additionalProperties": {}, "x-found-in": "body" }, "tags": { "type": "array", "items": { "type": "string" }, "x-found-in": "body" }, "user": { "type": "object", "properties": { "domain": { "type": "array", "items": { "type": "string" } }, "email": { "type": "array", "items": { "type": "string" } }, "full_name": { "type": "array", "items": { "type": "string" } }, "hash": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "roles": { "type": "array", "items": { "type": "string" } } }, "x-found-in": "body" }, "host": { "type": "object", "properties": { "architecture": { "type": "array", "items": { "type": "string" } }, "domain": { "type": "array", "items": { "type": "string" } }, "hostname": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "ip": { "type": "array", "items": { "type": "string" } }, "mac": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "os": { "type": "object", "properties": { "family": { "type": "string" }, "full": { "type": "string" }, "kernel": { "type": "string" }, "name": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "platform": { "type": "string" }, "type": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "version": { "type": "string" } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "type": { "type": "array", "items": { "type": "string" } } }, "x-found-in": "body" }, "service": { "type": "object", "properties": { "address": { "type": "string" }, "environment": { "type": "string" }, "ephemeral_id": { "type": "string" }, "id": { "type": "string" }, "name": { "type": "string" }, "node": { "type": "object", "properties": { "name": { "type": "string" }, "role": { "type": "string" }, "roles": { "type": "array", "items": { "type": "string" } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "state": { "type": "string" }, "type": { "type": "string" }, "version": { "type": "string" } }, "x-found-in": "body" }, "cloud": { "type": "object", "properties": { "account": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "availability_zone": { "type": "string" }, "instance": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "machine": { "type": "object", "properties": { "type": { "type": "string" } } }, "project": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "provider": { "type": "string" }, "region": { "type": "string" }, "service": { "type": "object", "properties": { "name": { "type": "string" } } } }, "x-found-in": "body" }, "orchestrator": { "type": "object", "properties": { "api_version": { "type": "string" }, "cluster": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" }, "url": { "type": "string" }, "version": { "type": "string" } } }, "namespace": { "type": "string" }, "organization": { "type": "string" }, "resource": { "type": "object", "properties": { "annotation": { "type": "string" }, "id": { "type": "string" }, "ip": { "type": "string" }, "label": { "type": "string" }, "name": { "type": "string" }, "parent": { "type": "object", "properties": { "type": { "type": "string" } } }, "type": { "type": "string" } } }, "type": { "type": "string" } }, "x-found-in": "body" } }, "required": ["entityType"] }
1	+ { "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "put-security-entity-store-entities-entitytype", "x-api": { "id": "security-entity-store.put-security-entity-store-entities-entitytype", "name": "put-security-entity-store-entities-entitytype", "namespace": "security-entity-store" }, "x-method": "PUT", "x-path": "/api/security/entity_store/entities/{entityType}", "x-destructive": true, "type": "object", "properties": { "entityType": { "type": "string", "description": "The entity type to update.", "x-found-in": "path" }, "force": { "oneOf": [{ "enum": ["true", "false"] }, { "type": "boolean" }], "description": "When true, allows updating protected fields.", "x-found-in": "query" }, "@timestamp": { "type": "string", "x-found-in": "body" }, "asset": { "type": "object", "properties": { "business_unit": { "type": "string" }, "criticality": { "enum": ["low_impact", "medium_impact", "high_impact", "extreme_impact", null] }, "environment": { "type": "string" }, "id": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner": { "type": "string" }, "serial_number": { "type": "string" }, "vendor": { "type": "string" } }, "x-found-in": "body" }, "entity": { "type": "object", "properties": { "attributes": { "type": "object", "properties": { "asset": { "type": "boolean" }, "known_redirects": { "type": "array", "items": { "type": "string" } }, "managed": { "type": "boolean" }, "mfa_enabled": { "type": "boolean" }, "oauth_consent_restriction": { "type": "string" }, "permissions": { "type": "array", "items": { "type": "string" } }, "storage_class": { "type": "string" }, "watchlists": { "type": "array", "items": { "type": "string" } } } }, "behaviors": { "type": "object", "properties": { "anomaly_job_ids": { "type": "array", "items": { "type": "string" } }, "rule_names": { "type": "array", "items": { "type": "string" } } } }, "created_by": { "type": "string" }, "EngineMetadata": { "type": "object", "properties": { "Type": { "type": "string" } } }, "id": { "type": "string" }, "lifecycle": { "type": "object", "properties": { "first_seen": { "type": "string" }, "last_activity": { "type": "string" }, "last_seen": { "type": "string" } } }, "name": { "type": "string" }, "relationships": { "type": "object", "properties": { "accesses_frequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "accesses_infrequently": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "administers": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "communicates_with": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "depends_on": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "owns_inferred": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } }, "resolution": { "type": "object", "properties": { "resolved_to": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } } } }, "supervises": { "type": "object", "properties": { "ids": { "type": "array", "items": { "type": "string" } }, "raw_identifiers": { "type": "object", "properties": { "entity.id": { "type": "array", "items": { "type": "string" } }, "host.id": { "type": "array", "items": { "type": "string" } }, "host.name": { "type": "array", "items": { "type": "string" } }, "service.name": { "type": "array", "items": { "type": "string" } }, "user.email": { "type": "array", "items": { "type": "string" } }, "user.id": { "type": "array", "items": { "type": "string" } }, "user.name": { "type": "array", "items": { "type": "string" } } } } } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "schema_version": { "type": "string" }, "source": { "type": "array", "items": { "type": "string" } }, "sub_type": { "type": "string" }, "type": { "type": "string" }, "url": { "type": "string" } }, "x-found-in": "body" }, "event": { "type": "object", "properties": { "ingested": { "type": "string" } }, "x-found-in": "body" }, "labels": { "type": "object", "properties": {}, "additionalProperties": {}, "x-found-in": "body" }, "tags": { "type": "array", "items": { "type": "string" }, "x-found-in": "body" }, "user": { "type": "object", "properties": { "domain": { "type": "array", "items": { "type": "string" } }, "email": { "type": "array", "items": { "type": "string" } }, "full_name": { "type": "array", "items": { "type": "string" } }, "hash": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "roles": { "type": "array", "items": { "type": "string" } } }, "x-found-in": "body" }, "host": { "type": "object", "properties": { "architecture": { "type": "array", "items": { "type": "string" } }, "domain": { "type": "array", "items": { "type": "string" } }, "hostname": { "type": "array", "items": { "type": "string" } }, "id": { "type": "array", "items": { "type": "string" } }, "ip": { "type": "array", "items": { "type": "string" } }, "mac": { "type": "array", "items": { "type": "string" } }, "name": { "type": "string" }, "os": { "type": "object", "properties": { "family": { "type": "string" }, "full": { "type": "string" }, "kernel": { "type": "string" }, "name": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "platform": { "type": "string" }, "type": { "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }] }, "version": { "type": "string" } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "type": { "type": "array", "items": { "type": "string" } } }, "x-found-in": "body" }, "service": { "type": "object", "properties": { "address": { "type": "string" }, "environment": { "type": "string" }, "ephemeral_id": { "type": "string" }, "id": { "type": "string" }, "name": { "type": "string" }, "node": { "type": "object", "properties": { "name": { "type": "string" }, "role": { "type": "string" }, "roles": { "type": "array", "items": { "type": "string" } } } }, "risk": { "type": "object", "properties": { "calculated_level": { "enum": ["Unknown", "Low", "Moderate", "High", "Critical"] }, "calculated_score": { "type": "number" }, "calculated_score_norm": { "type": "number" } } }, "state": { "type": "string" }, "type": { "type": "string" }, "version": { "type": "string" } }, "x-found-in": "body" }, "cloud": { "type": "object", "properties": { "account": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "availability_zone": { "type": "string" }, "instance": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "machine": { "type": "object", "properties": { "type": { "type": "string" } } }, "project": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "provider": { "type": "string" }, "region": { "type": "string" }, "service": { "type": "object", "properties": { "name": { "type": "string" } } } }, "x-found-in": "body" }, "orchestrator": { "type": "object", "properties": { "api_version": { "type": "string" }, "cluster": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" }, "url": { "type": "string" }, "version": { "type": "string" } } }, "namespace": { "type": "string" }, "organization": { "type": "string" }, "resource": { "type": "object", "properties": { "annotation": { "type": "string" }, "id": { "type": "string" }, "ip": { "type": "string" }, "label": { "type": "string" }, "name": { "type": "string" }, "parent": { "type": "object", "properties": { "type": { "type": "string" } } }, "type": { "type": "string" } } }, "type": { "type": "string" } }, "x-found-in": "body" } }, "required": ["entityType"] }

package/lib/kibana/schemas/patch_alerting_v2_rules_id.d.ts CHANGED Viewed

@@ -13,7 +13,7 @@ export declare const Kibana_HTTP_APIs_alerting_update_rule: z.ZodObject<{
         description: z.ZodOptional<z.ZodString>;
         name: z.ZodOptional<z.ZodString>;
         owner: z.ZodOptional<z.ZodString>;
-        tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        tags: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
     }, z.core.$strip>>;
     no_data_strategy: z.ZodOptional<z.ZodNullable<z.ZodUnion<readonly [z.ZodEnum<{
         last_known_status: "last_known_status";

package/lib/kibana/schemas/patch_alerting_v2_rules_id.js CHANGED Viewed

@@ -18,7 +18,7 @@ export const Kibana_HTTP_APIs_alerting_update_rule = z.object({
         description: z.string().optional(),
         name: z.string().optional(),
         owner: z.string().optional(),
-        tags: z.array(z.string()).optional()
+        tags: z.array(z.string()).nullable().optional()
     }).optional(),
     no_data_strategy: z.union([z.enum(['last_known_status']), z.enum(['emit']), z.enum(['recover']), z.enum(['none'])]).nullable().optional(),
     query: Kibana_HTTP_APIs_alerting_rule_query.optional(),

package/lib/kibana/schemas/patch_alerting_v2_rules_id.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"patch_alerting_v2_rules_id.js","sourceRoot":"","sources":["../../../src/kibana/schemas/patch_alerting_v2_rules_id.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;GAIG;AAEH,oDAAoD;AACpD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,uCAAuC,EAAE,uCAAuC,EAAE,oCAAoC,EAAE,MAAM,qBAAqB,CAAA;AAE5J,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjF,QAAQ,EAAE,uCAAuC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;~~KACrC~~,CAAC,CAAC,QAAQ,EAAE;IACb,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzI,KAAK,EAAE,oCAAoC,CAAC,QAAQ,EAAE;IACtD,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9G,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxB,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAClC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YACpC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE;YAClD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YACxC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YACvC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE;YACrD,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAC5C,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,uCAAuC,EAAE,CAAC,CAAA;AAGxD,OAAO,EAAE,uCAAuC,EAAE,MAAM,qBAAqB,CAAA;AAC7E,OAAO,EAAE,uCAAuC,EAAE,MAAM,qBAAqB,CAAA;AAC7E,OAAO,EAAE,oCAAoC,EAAE,MAAM,qBAAqB,CAAA;AAC1E,OAAO,EAAE,+CAA+C,EAAE,MAAM,qBAAqB,CAAA;AACrF,OAAO,EAAE,6CAA6C,EAAE,MAAM,qBAAqB,CAAA;AACnF,OAAO,EAAE,gDAAgD,EAAE,MAAM,qBAAqB,CAAA;AACtF,OAAO,EAAE,uCAAuC,EAAE,MAAM,qBAAqB,CAAA;AAC7E,OAAO,EAAE,uCAAuC,EAAE,MAAM,qBAAqB,CAAA"}
1	+ {"version":3,"file":"patch_alerting_v2_rules_id.js","sourceRoot":"","sources":["../../../src/kibana/schemas/patch_alerting_v2_rules_id.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;GAIG;AAEH,oDAAoD;AACpD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,uCAAuC,EAAE,uCAAuC,EAAE,oCAAoC,EAAE,MAAM,qBAAqB,CAAA;AAE5J,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjF,QAAQ,EAAE,uCAAuC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAChD,CAAC,CAAC,QAAQ,EAAE;IACb,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzI,KAAK,EAAE,oCAAoC,CAAC,QAAQ,EAAE;IACtD,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9G,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxB,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAClC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YACpC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE;YAClD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YACxC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YACvC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE;YACrD,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAC5C,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,uCAAuC,EAAE,CAAC,CAAA;AAGxD,OAAO,EAAE,uCAAuC,EAAE,MAAM,qBAAqB,CAAA;AAC7E,OAAO,EAAE,uCAAuC,EAAE,MAAM,qBAAqB,CAAA;AAC7E,OAAO,EAAE,oCAAoC,EAAE,MAAM,qBAAqB,CAAA;AAC1E,OAAO,EAAE,+CAA+C,EAAE,MAAM,qBAAqB,CAAA;AACrF,OAAO,EAAE,6CAA6C,EAAE,MAAM,qBAAqB,CAAA;AACnF,OAAO,EAAE,gDAAgD,EAAE,MAAM,qBAAqB,CAAA;AACtF,OAAO,EAAE,uCAAuC,EAAE,MAAM,qBAAqB,CAAA;AAC7E,OAAO,EAAE,uCAAuC,EAAE,MAAM,qBAAqB,CAAA"}

package/lib/kibana/schemas/post_agent_builder_tools_execute.d.ts CHANGED Viewed

@@ -1,5 +1,11 @@
 import { z } from 'zod';
 export declare const PostAgentBuilderToolsExecuteRequest: z.ZodObject<{
+    approvals: z.ZodOptional<z.ZodObject<{
+        auto_approved_apis: z.ZodOptional<z.ZodObject<{
+            elasticsearch: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            kibana: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
     connector_id: z.ZodOptional<z.ZodString>;
     tool_id: z.ZodString;
     tool_params: z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodUnknown>>;

package/lib/kibana/schemas/post_agent_builder_tools_execute.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"post_agent_builder_tools_execute.d.ts","sourceRoot":"","sources":["../../../src/kibana/schemas/post_agent_builder_tools_execute.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,eAAO,MAAM,mCAAmC~~;;;;iBAIM~~,CAAA;AACtD,MAAM,MAAM,mCAAmC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAA"}
1	+ {"version":3,"file":"post_agent_builder_tools_execute.d.ts","sourceRoot":"","sources":["../../../src/kibana/schemas/post_agent_builder_tools_execute.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,eAAO,MAAM,mCAAmC;;;;;;;;;;iBAUM,CAAA;AACtD,MAAM,MAAM,mCAAmC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAA"}

package/lib/kibana/schemas/post_agent_builder_tools_execute.js CHANGED Viewed

@@ -10,6 +10,12 @@
 /* eslint-disable @typescript-eslint/no-redeclare */
 import { z } from 'zod';
 export const PostAgentBuilderToolsExecuteRequest = z.object({
+    approvals: z.object({
+        auto_approved_apis: z.object({
+            elasticsearch: z.array(z.string()).optional(),
+            kibana: z.array(z.string()).optional()
+        }).optional()
+    }).optional(),
     connector_id: z.string().optional(),
     tool_id: z.string(),
     tool_params: z.record(z.string(), z.unknown().nullable())

package/lib/kibana/schemas/post_agent_builder_tools_execute.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"post_agent_builder_tools_execute.js","sourceRoot":"","sources":["../../../src/kibana/schemas/post_agent_builder_tools_execute.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;GAIG;AAEH,oDAAoD;AACpD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC;CAC1D,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,qCAAqC,EAAE,CAAC,CAAA"}
1	+ {"version":3,"file":"post_agent_builder_tools_execute.js","sourceRoot":"","sources":["../../../src/kibana/schemas/post_agent_builder_tools_execute.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;GAIG;AAEH,oDAAoD;AACpD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC;YAC3B,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YAC7C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;SACvC,CAAC,CAAC,QAAQ,EAAE;KACd,CAAC,CAAC,QAAQ,EAAE;IACb,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC;CAC1D,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,qCAAqC,EAAE,CAAC,CAAA"}