Get managed integrations
Base URL
https://{kibana_url}
GET
/api/fleet/managed_integrations
Auth
Stack
Experimental
9.5+
The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats.
Availability
Experimental since 9.5
This functionality is experimental and is not ready for production usage. Experimental features may change or be removed at any time. Elastic will work to fix any issues, but experimental features are not subject to the support SLA of official GA features. Specific Support terms apply.
Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments.
This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.
List managed integrations
Expand all
page
number
Page number. Defaults to 1.
perPage
number
Number of results per page. Defaults to 20.
sortField
string · max length: 256
Field to sort results by. Defaults to updated_at.
sortOrder
enum
Sort order, ascending or descending. Defaults to desc.
Values:
desc
asc
kuery
string · max length: 4096
A KQL query string to filter results. Filtering is restricted to the following fields: name, namespace, package.name.
200
Indicates a successful response
application/json
items
object [] · max items: 10000 required
−
Hide 15 properties
additional_datastreams_permissions
string [] · max items: 1000
Additional data stream permissions granted to the managed integration.
cloud_connector
object
+
Show 2 properties
cloud_connector_id
string · max length: 255 required
The ID of the cloud connector.
enabled
boolean required
Whether the cloud connector is active for this policy.
created_at
string · max length: 64 required
Creation timestamp (ISO 8601).
created_by
string · max length: 1024 required
User who created the policy.
description
string · max length: 2048
Managed integration description.
global_data_tags
object [] · max items: 100
Custom data tags applied to all data produced by this policy.
+
Show 2 properties
id
string · max length: 255 required
Managed integration unique identifier.
inputs
map string to object required
Package policy inputs. Refer to the integration documentation to know which inputs are available.
name
string · max length: 255 required
Managed integration name.
namespace
string · max length: 100
Policy namespace. Defaults to the agent policy namespace.
package
object required
−
Hide 3 properties
name
string · max length: 255 required
Integration package name.
title
string · max length: 255 required
Integration package display title.
version
string · max length: 50 required
Integration package version.
updated_at
string · max length: 64 required
Last update timestamp (ISO 8601).
updated_by
string · max length: 1024 required
User who last updated the policy.
var_group_selections
map string to string
Variable group selections. Maps var_group name to the selected option name within that group.
<string>
string · max length: 1024
vars
map string to anyOf
Input/stream level variable. Refer to the integration documentation for more information.
<string>
union anyOf · default: null
+
Show 1 property
Any of:
string[]
string
number[]
number
boolean
{ id, isSecretRef }
−
Hide 2 properties
id
string · max length: 255 required
isSecretRef
boolean required
attributes
object required
Thank you for your feedback.
Base URL
https://{kibana_url}
Examples
Request
Console
1 / 2 languages
‹
›
1
GET kbn:/api/fleet/managed_integrations
Generated from the API spec
1
2
curl -X GET "${KIBANA_URL}/api/fleet/managed_integrations" \
-H "Authorization: ApiKey ${API_KEY}"
Generated from the API spec
Response
Example response for listing managed integrations
Show more
Example of a generic error response
Show more
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
{
"items": [
{
"created_at": "2025-11-06T18:27:43.541Z",
"created_by": "test_user",
"description": "test",
"id": "d52a7812-5736-4fdc-aed8-72152afa1ffa",
"inputs": {
"ESS Billing-cel": {
"enabled": true,
"streams": {
"ess_billing.billing": {
"enabled": true
},
"ess_billing.credits": {
"enabled": false
}
},
"vars": {
"api_key": {
"id": "QY1sWpoBbWcMW-edr0Ee",
"isSecretRef": true
},
"organization_id": "1234",
"url": "https://billing.elastic-cloud.com"
}
}
},
"name": "ess_billing-1",
"namespace": "default",
"package": {
"name": "ess_billing",
"title": "Elasticsearch Service Billing",
"version": "1.6.0"
},
"updated_at": "2025-11-06T18:27:43.541Z",
"updated_by": "test_user"
},
{
"cloud_connector": {
"cloud_connector_id": "aws-connector-67890",
"enabled": true
},
"created_at": "2025-11-06T18:27:43.541Z",
"created_by": "test_user",
"description": "CSPM integration for AWS with cloud connector",
"id": "aws-policy-12345",
"inputs": {
"cspm-cloudbeat/cis_aws": {
"enabled": true
}
},
"name": "cspm-aws-policy",
"namespace": "default",
"package": {
"name": "cloud_security_posture",
"title": "Cloud Security Posture Management",
"version": "3.1.1"
},
"updated_at": "2025-11-06T18:27:43.541Z",
"updated_by": "test_user",
"vars": {
"deployment": "aws",
"posture": "cspm"
}
}
],
"page": 1,
"perPage": 20,
"total": 2
}
1
2
3
4
5
{
"error": "Bad Request",
"message": "An error message describing what went wrong",
"statusCode": 400
}