Gets the status of the privileged access detection package for the Entity Analytics privileged user monitoring experience

Base URL: https://{kibana_url}

GET /api/entity_analytics/privileged_user_monitoring/pad/status
GET /s/{space_id}/api/entity_analytics/privileged_user_monitoring/pad/status

Auth

Returns the installation and ML module setup status of the privileged access detection package, along with the state of each associated ML job.

Path parameters

space_id string optional: An identifier for the space. If space_id is not provided in the URL, the default space is used. Refer to Spaces for more information.

Response

Privileged access detection status retrieved

application/json

jobs object[] required
ml_module_setup_status enum required: Values: complete incomplete
package_installation_status enum required: Values: complete incomplete

View as Markdown

Base URL: https://{kibana_url}

Examples

Request Console 1 / 2 languages

Console Kibana Dev Tools

GET kbn:/api/entity_analytics/privileged_user_monitoring/pad/status

Generated from the API spec

curl Shell

curl -X GET "${KIBANA_URL}/api/entity_analytics/privileged_user_monitoring/pad/status" \
  -H "Authorization: ApiKey ${API_KEY}"

Generated from the API spec

Response

{
  "jobs": [
    {
      "description": "Detects high-risk login patterns",
      "job_id": "pad-high-risk-login",
      "state": "opened"
    },
    {
      "description": "Detects privilege escalation events",
      "job_id": "pad-privilege-escalation",
      "state": "opened"
    }
  ],
  "ml_module_setup_status": "complete",
  "package_installation_status": "complete"
}