--- type: api title: Kibana API (v8) description: The Kibana REST API enables you to manage resources such as connectors, data views, and saved objects. url: https://www.elastic.co/docs/api/doc/kibana/v8 resource: https://www.elastic.co/docs/api/doc/kibana/v8 products: - Kibana servers: - "https://{kibana_url}" spec: json: https://www.elastic.co/docs/api/doc/kibana/v8.json yaml: https://www.elastic.co/docs/api/doc/kibana/v8.yaml --- # Kibana API (v8) The Kibana REST API enables you to manage resources such as connectors, data views, and saved objects. The API calls are stateless. Each request that you make happens in isolation from other calls and must include all of the necessary information for Kibana to fulfill the request. API requests return JSON output, which is a format that is machine-readable and works well for automation. To interact with the Kibana API, use the following operations: - GET: Fetches the information. - PATCH: Applies partial modifications to the existing information. - POST: Adds new information. - PUT: Updates the existing information. - DELETE: Removes the information. You can prepend any Kibana API endpoint with `kbn:` and run the request in **Dev Tools → Console**. For example: ``` GET kbn:/api/data_views ``` For more information about the console, refer to [Run API requests](https://www.elastic.co/guide/en/kibana/current/console-kibana.html). NOTE: Access to internal Kibana API endpoints will be restricted in Kibana version 9.0. Please move any integrations to publicly documented APIs. ## Documentation source and versions This documentation is derived from the `8.19` branch of the [kibana](https://github.com/elastic/kibana) repository. It is provided under license [Attribution-NonCommercial-NoDerivatives 4.0 International](https://creativecommons.org/licenses/by-nc-nd/4.0/). This documentation contains work-in-progress information for future Elastic Stack releases. - [Authentication](https://www.elastic.co/docs/api/doc/kibana/v8/authentication) - [Spaces](https://www.elastic.co/docs/api/doc/kibana/v8/kibana-api-overview/) ### [Alerting](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-alerting) - [Get the alerting framework health](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getalertinghealth): `GET` `/api/alerting/_health`, `GET` `/s/{space_id}/api/alerting/_health` - [Get rule details](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-alerting-rule-id): `GET` `/api/alerting/rule/{id}`, `GET` `/s/{space_id}/api/alerting/rule/{id}` - [Create a rule](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-alerting-rule-id): `POST` `/api/alerting/rule/{id}`, `POST` `/s/{space_id}/api/alerting/rule/{id}` - [Update a rule](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-put-alerting-rule-id): `PUT` `/api/alerting/rule/{id}`, `PUT` `/s/{space_id}/api/alerting/rule/{id}` - [Delete a rule](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-alerting-rule-id): `DELETE` `/api/alerting/rule/{id}`, `DELETE` `/s/{space_id}/api/alerting/rule/{id}` - [Disable a rule](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-alerting-rule-id-disable): `POST` `/api/alerting/rule/{id}/_disable`, `POST` `/s/{space_id}/api/alerting/rule/{id}/_disable` - [Enable a rule](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-alerting-rule-id-enable): `POST` `/api/alerting/rule/{id}/_enable`, `POST` `/s/{space_id}/api/alerting/rule/{id}/_enable` - [Mute all alerts](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-alerting-rule-id-mute-all): `POST` `/api/alerting/rule/{id}/_mute_all`, `POST` `/s/{space_id}/api/alerting/rule/{id}/_mute_all` - [Unmute all alerts](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-alerting-rule-id-unmute-all): `POST` `/api/alerting/rule/{id}/_unmute_all`, `POST` `/s/{space_id}/api/alerting/rule/{id}/_unmute_all` - [Update the API key for a rule](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-alerting-rule-id-update-api-key): `POST` `/api/alerting/rule/{id}/_update_api_key`, `POST` `/s/{space_id}/api/alerting/rule/{id}/_update_api_key` - [Schedule a snooze for the rule](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-alerting-rule-id-snooze-schedule): `POST` `/api/alerting/rule/{id}/snooze_schedule`, `POST` `/s/{space_id}/api/alerting/rule/{id}/snooze_schedule` - [Delete a snooze schedule for a rule](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-alerting-rule-ruleid-snooze-schedule-scheduleid): `DELETE` `/api/alerting/rule/{ruleId}/snooze_schedule/{scheduleId}`, `DELETE` `/s/{space_id}/api/alerting/rule/{ruleId}/snooze_schedule/{scheduleId}` - [Mute an alert](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-alerting-rule-rule-id-alert-alert-id-mute): `POST` `/api/alerting/rule/{rule_id}/alert/{alert_id}/_mute`, `POST` `/s/{space_id}/api/alerting/rule/{rule_id}/alert/{alert_id}/_mute` - [Unmute an alert](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-alerting-rule-rule-id-alert-alert-id-unmute): `POST` `/api/alerting/rule/{rule_id}/alert/{alert_id}/_unmute`, `POST` `/s/{space_id}/api/alerting/rule/{rule_id}/alert/{alert_id}/_unmute` - [Get the rule types](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getruletypes): `GET` `/api/alerting/rule_types`, `GET` `/s/{space_id}/api/alerting/rule_types` - [Get information about rules](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-alerting-rules-find): `GET` `/api/alerting/rules/_find`, `GET` `/s/{space_id}/api/alerting/rules/_find` - [Get an alert by identifier](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-legacygetalert): `GET` `/api/alerts/alert/{alertId}`, `GET` `/s/{space_id}/api/alerts/alert/{alertId}` - [Create an alert](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-legacycreatealert): `POST` `/api/alerts/alert/{alertId}`, `POST` `/s/{space_id}/api/alerts/alert/{alertId}` - [Update an alert](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-legacyupdatealert): `PUT` `/api/alerts/alert/{alertId}`, `PUT` `/s/{space_id}/api/alerts/alert/{alertId}` - [Delete an alert](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-legarydeletealert): `DELETE` `/api/alerts/alert/{alertId}`, `DELETE` `/s/{space_id}/api/alerts/alert/{alertId}` - [Disable an alert](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-legacydisablealert): `POST` `/api/alerts/alert/{alertId}/_disable`, `POST` `/s/{space_id}/api/alerts/alert/{alertId}/_disable` - [Enable an alert](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-legacyenablealert): `POST` `/api/alerts/alert/{alertId}/_enable`, `POST` `/s/{space_id}/api/alerts/alert/{alertId}/_enable` - [Mute all alert instances](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-legacymuteallalertinstances): `POST` `/api/alerts/alert/{alertId}/_mute_all`, `POST` `/s/{space_id}/api/alerts/alert/{alertId}/_mute_all` - [Unmute all alert instances](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-legacyunmuteallalertinstances): `POST` `/api/alerts/alert/{alertId}/_unmute_all`, `POST` `/s/{space_id}/api/alerts/alert/{alertId}/_unmute_all` - [Mute an alert instance](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-legacymutealertinstance): `POST` `/api/alerts/alert/{alertId}/alert_instance/{alertInstanceId}/_mute`, `POST` `/s/{space_id}/api/alerts/alert/{alertId}/alert_instance/{alertInstanceId}/_mute` - [Unmute an alert instance](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-legacyunmutealertinstance): `POST` `/api/alerts/alert/{alertId}/alert_instance/{alertInstanceId}/_unmute`, `POST` `/s/{space_id}/api/alerts/alert/{alertId}/alert_instance/{alertInstanceId}/_unmute` - [Get a paginated set of alerts](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-legacyfindalerts): `GET` `/api/alerts/alerts/_find`, `GET` `/s/{space_id}/api/alerts/alerts/_find` - [Get the alerting framework health](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-legacygetalertinghealth): `GET` `/api/alerts/alerts/_health`, `GET` `/s/{space_id}/api/alerts/alerts/_health` - [Get the alert types](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-legacygetalerttypes): `GET` `/api/alerts/alerts/list_alert_types`, `GET` `/s/{space_id}/api/alerts/alerts/list_alert_types` ### [APM agent configuration](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-apm-agent-configuration) - [Get a list of agent configurations](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getagentconfigurations): `GET` `/api/apm/settings/agent-configuration`, `GET` `/s/{space_id}/api/apm/settings/agent-configuration` - [Create or update agent configuration](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createupdateagentconfiguration): `PUT` `/api/apm/settings/agent-configuration`, `PUT` `/s/{space_id}/api/apm/settings/agent-configuration` - [Delete agent configuration](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deleteagentconfiguration): `DELETE` `/api/apm/settings/agent-configuration`, `DELETE` `/s/{space_id}/api/apm/settings/agent-configuration` - [Get agent name for service](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getagentnameforservice): `GET` `/api/apm/settings/agent-configuration/agent_name`, `GET` `/s/{space_id}/api/apm/settings/agent-configuration/agent_name` - [Get environments for service](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getenvironmentsforservice): `GET` `/api/apm/settings/agent-configuration/environments`, `GET` `/s/{space_id}/api/apm/settings/agent-configuration/environments` - [Lookup single agent configuration](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-searchsingleconfiguration): `POST` `/api/apm/settings/agent-configuration/search`, `POST` `/s/{space_id}/api/apm/settings/agent-configuration/search` - [Get single agent configuration](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getsingleagentconfiguration): `GET` `/api/apm/settings/agent-configuration/view`, `GET` `/s/{space_id}/api/apm/settings/agent-configuration/view` ### [APM agent keys](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-apm-agent-keys) - [Create an APM agent key](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createagentkey): `POST` `/api/apm/agent_keys`, `POST` `/s/{space_id}/api/apm/agent_keys` ### [APM annotations](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-apm-annotations) - [Create a service annotation](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createannotation): `POST` `/api/apm/services/{serviceName}/annotation`, `POST` `/s/{space_id}/api/apm/services/{serviceName}/annotation` - [Search for annotations](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getannotation): `GET` `/api/apm/services/{serviceName}/annotation/search`, `GET` `/s/{space_id}/api/apm/services/{serviceName}/annotation/search` ### [APM server schema](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-apm-server-schema) - [Save APM server schema](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-saveapmserverschema): `POST` `/api/apm/fleet/apm_server_schema`, `POST` `/s/{space_id}/api/apm/fleet/apm_server_schema` ### [APM sourcemaps](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-apm-sourcemaps) - [Get source maps](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getsourcemaps): `GET` `/api/apm/sourcemaps`, `GET` `/s/{space_id}/api/apm/sourcemaps` - [Upload source map](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-uploadsourcemap): `POST` `/api/apm/sourcemaps`, `POST` `/s/{space_id}/api/apm/sourcemaps` - [Delete source map](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deletesourcemap): `DELETE` `/api/apm/sourcemaps/{id}`, `DELETE` `/s/{space_id}/api/apm/sourcemaps/{id}` ### [Cases](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-cases) - [Create a case](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createcasedefaultspace): `POST` `/api/cases`, `POST` `/s/{space_id}/api/cases` - [Update cases](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-updatecasedefaultspace): `PATCH` `/api/cases`, `PATCH` `/s/{space_id}/api/cases` - [Delete cases](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deletecasedefaultspace): `DELETE` `/api/cases`, `DELETE` `/s/{space_id}/api/cases` - [Search cases](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-findcasesdefaultspace): `GET` `/api/cases/_find`, `GET` `/s/{space_id}/api/cases/_find` - [Get cases for an alert](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getcasesbyalertdefaultspace): `GET` `/api/cases/alerts/{alertId}`, `GET` `/s/{space_id}/api/cases/alerts/{alertId}` - [Get case settings](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getcaseconfigurationdefaultspace): `GET` `/api/cases/configure`, `GET` `/s/{space_id}/api/cases/configure` - [Add case settings](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-setcaseconfigurationdefaultspace): `POST` `/api/cases/configure`, `POST` `/s/{space_id}/api/cases/configure` - [Get case connectors](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-findcaseconnectorsdefaultspace): `GET` `/api/cases/configure/connectors/_find`, `GET` `/s/{space_id}/api/cases/configure/connectors/_find` - [Update case settings](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-updatecaseconfigurationdefaultspace): `PATCH` `/api/cases/configure/{configurationId}`, `PATCH` `/s/{space_id}/api/cases/configure/{configurationId}` - [Get case creators](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getcasereportersdefaultspace): `GET` `/api/cases/reporters` - [Get case status summary](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getcasestatusdefaultspace): `GET` `/api/cases/status`, `GET` `/s/{space_id}/api/cases/status` - [Get case tags](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getcasetagsdefaultspace): `GET` `/api/cases/tags`, `GET` `/s/{space_id}/api/cases/tags` - [Get case information](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getcasedefaultspace): `GET` `/api/cases/{caseId}`, `GET` `/s/{space_id}/api/cases/{caseId}` - [Get all alerts for a case](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getcasealertsdefaultspace): `GET` `/api/cases/{caseId}/alerts`, `GET` `/s/{space_id}/api/cases/{caseId}/alerts` - [Get all case comments](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getallcasecommentsdefaultspace): `GET` `/api/cases/{caseId}/comments`, `GET` `/s/{space_id}/api/cases/{caseId}/comments` - [Add a case comment or alert](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-addcasecommentdefaultspace): `POST` `/api/cases/{caseId}/comments`, `POST` `/s/{space_id}/api/cases/{caseId}/comments` - [Update a case comment or alert](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-updatecasecommentdefaultspace): `PATCH` `/api/cases/{caseId}/comments`, `PATCH` `/s/{space_id}/api/cases/{caseId}/comments` - [Delete all case comments and alerts](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deletecasecommentsdefaultspace): `DELETE` `/api/cases/{caseId}/comments`, `DELETE` `/s/{space_id}/api/cases/{caseId}/comments` - [Find case comments and alerts](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-findcasecommentsdefaultspace): `GET` `/api/cases/{caseId}/comments/_find`, `GET` `/s/{space_id}/api/cases/{caseId}/comments/_find` - [Get a case comment or alert](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getcasecommentdefaultspace): `GET` `/api/cases/{caseId}/comments/{commentId}`, `GET` `/s/{space_id}/api/cases/{caseId}/comments/{commentId}` - [Delete a case comment or alert](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deletecasecommentdefaultspace): `DELETE` `/api/cases/{caseId}/comments/{commentId}`, `DELETE` `/s/{space_id}/api/cases/{caseId}/comments/{commentId}` - [Push a case to an external service](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-pushcasedefaultspace): `POST` `/api/cases/{caseId}/connector/{connectorId}/_push`, `POST` `/s/{space_id}/api/cases/{caseId}/connector/{connectorId}/_push` - [Attach a file to a case](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-addcasefiledefaultspace): `POST` `/api/cases/{caseId}/files`, `POST` `/s/{space_id}/api/cases/{caseId}/files` - [Get case activity](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getcaseactivitydefaultspace): `GET` `/api/cases/{caseId}/user_actions`, `GET` `/s/{space_id}/api/cases/{caseId}/user_actions` - [Find case activity](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-findcaseactivitydefaultspace): `GET` `/api/cases/{caseId}/user_actions/_find`, `GET` `/s/{space_id}/api/cases/{caseId}/user_actions/_find` ### [Connectors](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-connectors) - [Get all connectors](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-actions): `GET` `/api/actions`, `GET` `/s/{space_id}/api/actions` - [Create a connector](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-actions-action): `POST` `/api/actions/action`, `POST` `/s/{space_id}/api/actions/action` - [Get connector information](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-actions-action-id): `GET` `/api/actions/action/{id}`, `GET` `/s/{space_id}/api/actions/action/{id}` - [Update a connector](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-put-actions-action-id): `PUT` `/api/actions/action/{id}`, `PUT` `/s/{space_id}/api/actions/action/{id}` - [Delete a connector](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-actions-action-id): `DELETE` `/api/actions/action/{id}`, `DELETE` `/s/{space_id}/api/actions/action/{id}` - [Run a connector](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-actions-action-id-execute): `POST` `/api/actions/action/{id}/_execute`, `POST` `/s/{space_id}/api/actions/action/{id}/_execute` - [Get connector information](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-actions-connector-id): `GET` `/api/actions/connector/{id}`, `GET` `/s/{space_id}/api/actions/connector/{id}` - [Create a connector](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-actions-connector-id): `POST` `/api/actions/connector/{id}`, `POST` `/s/{space_id}/api/actions/connector/{id}` - [Update a connector](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-put-actions-connector-id): `PUT` `/api/actions/connector/{id}`, `PUT` `/s/{space_id}/api/actions/connector/{id}` - [Delete a connector](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-actions-connector-id): `DELETE` `/api/actions/connector/{id}`, `DELETE` `/s/{space_id}/api/actions/connector/{id}` - [Run a connector](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-actions-connector-id-execute): `POST` `/api/actions/connector/{id}/_execute`, `POST` `/s/{space_id}/api/actions/connector/{id}/_execute` - [Get connector types](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-actions-connector-types): `GET` `/api/actions/connector_types`, `GET` `/s/{space_id}/api/actions/connector_types` - [Get all connectors](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-actions-connectors): `GET` `/api/actions/connectors`, `GET` `/s/{space_id}/api/actions/connectors` - [Get connector types](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-actions-list-action-types): `GET` `/api/actions/list_action_types`, `GET` `/s/{space_id}/api/actions/list_action_types` ### [Data streams](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-data-streams) - [List data streams](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-data-streams-list): `GET` `/api/fleet/data_streams`, `GET` `/s/{space_id}/api/fleet/data_streams` ### [Data views](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-data-views) - [Get all data views](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getalldataviewsdefault): `GET` `/api/data_views`, `GET` `/s/{space_id}/api/data_views` - [Create a data view](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createdataviewdefaultw): `POST` `/api/data_views/data_view`, `POST` `/s/{space_id}/api/data_views/data_view` - [Get a data view](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getdataviewdefault): `GET` `/api/data_views/data_view/{viewId}`, `GET` `/s/{space_id}/api/data_views/data_view/{viewId}` - [Update a data view](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-updatedataviewdefault): `POST` `/api/data_views/data_view/{viewId}`, `POST` `/s/{space_id}/api/data_views/data_view/{viewId}` - [Delete a data view](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deletedataviewdefault): `DELETE` `/api/data_views/data_view/{viewId}`, `DELETE` `/s/{space_id}/api/data_views/data_view/{viewId}` - [Update data view fields metadata](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-updatefieldsmetadatadefault): `POST` `/api/data_views/data_view/{viewId}/fields`, `POST` `/s/{space_id}/api/data_views/data_view/{viewId}/fields` - [Create a runtime field](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createruntimefielddefault): `POST` `/api/data_views/data_view/{viewId}/runtime_field`, `POST` `/s/{space_id}/api/data_views/data_view/{viewId}/runtime_field` - [Create or update a runtime field](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createupdateruntimefielddefault): `PUT` `/api/data_views/data_view/{viewId}/runtime_field`, `PUT` `/s/{space_id}/api/data_views/data_view/{viewId}/runtime_field` - [Get a runtime field](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getruntimefielddefault): `GET` `/api/data_views/data_view/{viewId}/runtime_field/{fieldName}`, `GET` `/s/{space_id}/api/data_views/data_view/{viewId}/runtime_field/{fieldName}` - [Update a runtime field](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-updateruntimefielddefault): `POST` `/api/data_views/data_view/{viewId}/runtime_field/{fieldName}`, `POST` `/s/{space_id}/api/data_views/data_view/{viewId}/runtime_field/{fieldName}` - [Delete a runtime field from a data view](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deleteruntimefielddefault): `DELETE` `/api/data_views/data_view/{viewId}/runtime_field/{fieldName}`, `DELETE` `/s/{space_id}/api/data_views/data_view/{viewId}/runtime_field/{fieldName}` - [Get the default data view](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getdefaultdataviewdefault): `GET` `/api/data_views/default`, `GET` `/s/{space_id}/api/data_views/default` - [Set the default data view](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-setdefaultdatailviewdefault): `POST` `/api/data_views/default`, `POST` `/s/{space_id}/api/data_views/default` - [Swap saved object references](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-swapdataviewsdefault): `POST` `/api/data_views/swap_references`, `POST` `/s/{space_id}/api/data_views/swap_references` - [Preview a saved object reference swap](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-previewswapdataviewsdefault): `POST` `/api/data_views/swap_references/_preview`, `POST` `/s/{space_id}/api/data_views/swap_references/_preview` ### [Elastic Agent actions](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-elastic-agent-actions) - [Get agent action status](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-agents-action-status): `GET` `/api/fleet/agents/action_status`, `GET` `/s/{space_id}/api/fleet/agents/action_status` - [Cancel agent action](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-agent-action-cancel): `POST` `/api/fleet/agents/actions/{actionId}/cancel`, `POST` `/s/{space_id}/api/fleet/agents/actions/{actionId}/cancel` - [Create agent action](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-new-agent-action): `POST` `/api/fleet/agents/{agentId}/actions`, `POST` `/s/{space_id}/api/fleet/agents/{agentId}/actions` ### [Elastic Agent binary download sources](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-elastic-agent-binary-download-sources) - [List agent binary download sources](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-download-sources): `GET` `/api/fleet/agent_download_sources`, `GET` `/s/{space_id}/api/fleet/agent_download_sources` - [Create agent binary download source](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-download-sources): `POST` `/api/fleet/agent_download_sources`, `POST` `/s/{space_id}/api/fleet/agent_download_sources` - [Get agent binary download source by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-one-download-source): `GET` `/api/fleet/agent_download_sources/{sourceId}`, `GET` `/s/{space_id}/api/fleet/agent_download_sources/{sourceId}` - [Update agent binary download source by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-update-download-source): `PUT` `/api/fleet/agent_download_sources/{sourceId}`, `PUT` `/s/{space_id}/api/fleet/agent_download_sources/{sourceId}` - [Delete agent binary download source by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-download-source): `DELETE` `/api/fleet/agent_download_sources/{sourceId}`, `DELETE` `/s/{space_id}/api/fleet/agent_download_sources/{sourceId}` ### [Elastic Agent policies](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-elastic-agent-policies) - [List agent policies](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-agent-policy-list): `GET` `/api/fleet/agent_policies`, `GET` `/s/{space_id}/api/fleet/agent_policies` - [Create agent policy](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-create-agent-policy): `POST` `/api/fleet/agent_policies`, `POST` `/s/{space_id}/api/fleet/agent_policies` - [Bulk get agent policies](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-bulk-get-agent-policies): `POST` `/api/fleet/agent_policies/_bulk_get`, `POST` `/s/{space_id}/api/fleet/agent_policies/_bulk_get` - [Delete agent policy by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-agent-policy): `POST` `/api/fleet/agent_policies/delete`, `POST` `/s/{space_id}/api/fleet/agent_policies/delete` - [Get agent policy by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-agent-policy-info): `GET` `/api/fleet/agent_policies/{agentPolicyId}`, `GET` `/s/{space_id}/api/fleet/agent_policies/{agentPolicyId}` - [Update agent policy by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-update-agent-policy): `PUT` `/api/fleet/agent_policies/{agentPolicyId}`, `PUT` `/s/{space_id}/api/fleet/agent_policies/{agentPolicyId}` - [Copy agent policy by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-agent-policy-copy): `POST` `/api/fleet/agent_policies/{agentPolicyId}/copy`, `POST` `/s/{space_id}/api/fleet/agent_policies/{agentPolicyId}/copy` - [Download agent policy by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-agent-policy-download): `GET` `/api/fleet/agent_policies/{agentPolicyId}/download`, `GET` `/s/{space_id}/api/fleet/agent_policies/{agentPolicyId}/download` - [Get full agent policy by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-agent-policy-full): `GET` `/api/fleet/agent_policies/{agentPolicyId}/full`, `GET` `/s/{space_id}/api/fleet/agent_policies/{agentPolicyId}/full` ### [Elastic Agent status](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-elastic-agent-status) - [Get agent status summary](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-agent-status-deprecated): `GET` `/api/fleet/agent-status`, `GET` `/s/{space_id}/api/fleet/agent-status` - [Get agent status summary](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-agent-status): `GET` `/api/fleet/agent_status`, `GET` `/s/{space_id}/api/fleet/agent_status` - [Get incoming agent data](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-agent-data): `GET` `/api/fleet/agent_status/data`, `GET` `/s/{space_id}/api/fleet/agent_status/data` ### [Elastic Agents](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-elastic-agents) - [List agents](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-agents): `GET` `/api/fleet/agents`, `GET` `/s/{space_id}/api/fleet/agents` - [List agents by action ids](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-agents-by-actions): `POST` `/api/fleet/agents`, `POST` `/s/{space_id}/api/fleet/agents` - [Bulk reassign agents](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-bulk-reassign-agents): `POST` `/api/fleet/agents/bulk_reassign`, `POST` `/s/{space_id}/api/fleet/agents/bulk_reassign` - [Bulk request diagnostics from agents](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-bulk-request-diagnostics): `POST` `/api/fleet/agents/bulk_request_diagnostics`, `POST` `/s/{space_id}/api/fleet/agents/bulk_request_diagnostics` - [Bulk unenroll agents](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-bulk-unenroll-agents): `POST` `/api/fleet/agents/bulk_unenroll`, `POST` `/s/{space_id}/api/fleet/agents/bulk_unenroll` - [Bulk update agent tags](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-bulk-update-agent-tags): `POST` `/api/fleet/agents/bulk_update_agent_tags`, `POST` `/s/{space_id}/api/fleet/agents/bulk_update_agent_tags` - [Bulk upgrade agents](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-bulk-upgrade-agents): `POST` `/api/fleet/agents/bulk_upgrade`, `POST` `/s/{space_id}/api/fleet/agents/bulk_upgrade` - [Delete file uploaded by agent](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-agent-upload-file): `DELETE` `/api/fleet/agents/files/{fileId}`, `DELETE` `/s/{space_id}/api/fleet/agents/files/{fileId}` - [Get file uploaded by agent](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-agent-upload-file): `GET` `/api/fleet/agents/files/{fileId}/{fileName}`, `GET` `/s/{space_id}/api/fleet/agents/files/{fileId}/{fileName}` - [Get agent setup info](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-agents-setup-status): `GET` `/api/fleet/agents/setup`, `GET` `/s/{space_id}/api/fleet/agents/setup` - [Initiate agent setup](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-setup-agents): `POST` `/api/fleet/agents/setup`, `POST` `/s/{space_id}/api/fleet/agents/setup` - [List agent tags](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-agent-tags): `GET` `/api/fleet/agents/tags`, `GET` `/s/{space_id}/api/fleet/agents/tags` - [Get agent by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-agent): `GET` `/api/fleet/agents/{agentId}`, `GET` `/s/{space_id}/api/fleet/agents/{agentId}` - [Update agent by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-update-agent): `PUT` `/api/fleet/agents/{agentId}`, `PUT` `/s/{space_id}/api/fleet/agents/{agentId}` - [Delete agent by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-agent): `DELETE` `/api/fleet/agents/{agentId}`, `DELETE` `/s/{space_id}/api/fleet/agents/{agentId}` - [Reassign agent](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-reassign-agent): `POST` `/api/fleet/agents/{agentId}/reassign`, `POST` `/s/{space_id}/api/fleet/agents/{agentId}/reassign` - [Reassign agent](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-reassign-agent-deprecated): `PUT` `/api/fleet/agents/{agentId}/reassign`, `PUT` `/s/{space_id}/api/fleet/agents/{agentId}/reassign` - [Request agent diagnostics](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-request-diagnostics-agent): `POST` `/api/fleet/agents/{agentId}/request_diagnostics`, `POST` `/s/{space_id}/api/fleet/agents/{agentId}/request_diagnostics` - [Unenroll agent](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-unenroll-agent): `POST` `/api/fleet/agents/{agentId}/unenroll`, `POST` `/s/{space_id}/api/fleet/agents/{agentId}/unenroll` - [Upgrade agent](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-upgrade-agent): `POST` `/api/fleet/agents/{agentId}/upgrade`, `POST` `/s/{space_id}/api/fleet/agents/{agentId}/upgrade` - [List agent uploads](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-list-agent-uploads): `GET` `/api/fleet/agents/{agentId}/uploads`, `GET` `/s/{space_id}/api/fleet/agents/{agentId}/uploads` ### [Elastic Package Manager (EPM)](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-elastic-package-manager-epm) - [Bulk get assets](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-bulk-get-assets): `POST` `/api/fleet/epm/bulk_assets`, `POST` `/s/{space_id}/api/fleet/epm/bulk_assets` - [List package categories](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-package-categories): `GET` `/api/fleet/epm/categories`, `GET` `/s/{space_id}/api/fleet/epm/categories` - [List packages](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-list-all-packages): `GET` `/api/fleet/epm/packages`, `GET` `/s/{space_id}/api/fleet/epm/packages` - [Install by package by direct upload](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-install-package-by-upload): `POST` `/api/fleet/epm/packages`, `POST` `/s/{space_id}/api/fleet/epm/packages` - [Bulk install packages](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-bulk-install-packages): `POST` `/api/fleet/epm/packages/_bulk`, `POST` `/s/{space_id}/api/fleet/epm/packages/_bulk` - [Get limited package list](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-list-limited-packages): `GET` `/api/fleet/epm/packages/limited`, `GET` `/s/{space_id}/api/fleet/epm/packages/limited` - [Get package stats](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-package-stats): `GET` `/api/fleet/epm/packages/{pkgName}/stats`, `GET` `/s/{space_id}/api/fleet/epm/packages/{pkgName}/stats` - [Get package](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-package): `GET` `/api/fleet/epm/packages/{pkgName}/{pkgVersion}`, `GET` `/s/{space_id}/api/fleet/epm/packages/{pkgName}/{pkgVersion}` - [Install package](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-install-package): `POST` `/api/fleet/epm/packages/{pkgName}/{pkgVersion}`, `POST` `/s/{space_id}/api/fleet/epm/packages/{pkgName}/{pkgVersion}` - [Update package settings](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-update-package): `PUT` `/api/fleet/epm/packages/{pkgName}/{pkgVersion}`, `PUT` `/s/{space_id}/api/fleet/epm/packages/{pkgName}/{pkgVersion}` - [Delete package](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-package): `DELETE` `/api/fleet/epm/packages/{pkgName}/{pkgVersion}`, `DELETE` `/s/{space_id}/api/fleet/epm/packages/{pkgName}/{pkgVersion}` - [Authorize transforms](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-reauthorize-transforms): `POST` `/api/fleet/epm/packages/{pkgName}/{pkgVersion}/transforms/authorize`, `POST` `/s/{space_id}/api/fleet/epm/packages/{pkgName}/{pkgVersion}/transforms/authorize` - [Get package file](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-packages-get-file): `GET` `/api/fleet/epm/packages/{pkgName}/{pkgVersion}/{filePath}`, `GET` `/s/{space_id}/api/fleet/epm/packages/{pkgName}/{pkgVersion}/{filePath}` - [Get package](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-package-deprecated): `GET` `/api/fleet/epm/packages/{pkgkey}`, `GET` `/s/{space_id}/api/fleet/epm/packages/{pkgkey}` - [Install package](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-install-package-deprecated): `POST` `/api/fleet/epm/packages/{pkgkey}`, `POST` `/s/{space_id}/api/fleet/epm/packages/{pkgkey}` - [Delete ackage](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-package-deprecated): `DELETE` `/api/fleet/epm/packages/{pkgkey}`, `DELETE` `/s/{space_id}/api/fleet/epm/packages/{pkgkey}` - [Get inputs template](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-inputs-template): `GET` `/api/fleet/epm/templates/{pkgName}/{pkgVersion}/inputs`, `GET` `/s/{space_id}/api/fleet/epm/templates/{pkgName}/{pkgVersion}/inputs` - [Get package signature verification key ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-packages-get-verification-key-id): `GET` `/api/fleet/epm/verification_key_id`, `GET` `/s/{space_id}/api/fleet/epm/verification_key_id` ### [Fleet enrollment API keys](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-fleet-enrollment-api-keys) - [List enrollment API keys](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-enrollment-api-keys-deprecated): `GET` `/api/fleet/enrollment-api-keys`, `GET` `/s/{space_id}/api/fleet/enrollment-api-keys` - [Create enrollment API key](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-create-enrollment-api-keys-deprecated): `POST` `/api/fleet/enrollment-api-keys`, `POST` `/s/{space_id}/api/fleet/enrollment-api-keys` - [Get enrollment API key by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-enrollment-api-key-deprecated): `GET` `/api/fleet/enrollment-api-keys/{keyId}`, `GET` `/s/{space_id}/api/fleet/enrollment-api-keys/{keyId}` - [Delete enrollment API key by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-enrollment-api-key-deprecated): `DELETE` `/api/fleet/enrollment-api-keys/{keyId}`, `DELETE` `/s/{space_id}/api/fleet/enrollment-api-keys/{keyId}` - [List enrollment API keys](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-enrollment-api-keys): `GET` `/api/fleet/enrollment_api_keys`, `GET` `/s/{space_id}/api/fleet/enrollment_api_keys` - [Create enrollment API key](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-create-enrollment-api-keys): `POST` `/api/fleet/enrollment_api_keys`, `POST` `/s/{space_id}/api/fleet/enrollment_api_keys` - [Get enrollment API key by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-enrollment-api-key): `GET` `/api/fleet/enrollment_api_keys/{keyId}`, `GET` `/s/{space_id}/api/fleet/enrollment_api_keys/{keyId}` - [Revoke enrollment API key by ID by marking it as inactive](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-enrollment-api-key): `DELETE` `/api/fleet/enrollment_api_keys/{keyId}`, `DELETE` `/s/{space_id}/api/fleet/enrollment_api_keys/{keyId}` ### [Fleet internals](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-fleet-internals) - [Fleet Server health check](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-fleet-server-health-check): `POST` `/api/fleet/health_check`, `POST` `/s/{space_id}/api/fleet/health_check` - [Get settings](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-settings): `GET` `/api/fleet/settings`, `GET` `/s/{space_id}/api/fleet/settings` - [Update settings](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-update-settings): `PUT` `/api/fleet/settings`, `PUT` `/s/{space_id}/api/fleet/settings` - [Initiate Fleet setup](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-setup): `POST` `/api/fleet/setup`, `POST` `/s/{space_id}/api/fleet/setup` ### [Fleet Kubernetes](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-fleet-kubernetes) - [Get full K8s agent manifest](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-full-k8s-manifest): `GET` `/api/fleet/kubernetes`, `GET` `/s/{space_id}/api/fleet/kubernetes` ### [Fleet outputs](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-fleet-outputs) - [Generate Logstash API key](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-generate-logstash-api-key): `POST` `/api/fleet/logstash_api_keys`, `POST` `/s/{space_id}/api/fleet/logstash_api_keys` - [List outputs](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-outputs): `GET` `/api/fleet/outputs`, `GET` `/s/{space_id}/api/fleet/outputs` - [Create output](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-outputs): `POST` `/api/fleet/outputs`, `POST` `/s/{space_id}/api/fleet/outputs` - [Get output by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-output): `GET` `/api/fleet/outputs/{outputId}`, `GET` `/s/{space_id}/api/fleet/outputs/{outputId}` - [Update output by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-update-output): `PUT` `/api/fleet/outputs/{outputId}`, `PUT` `/s/{space_id}/api/fleet/outputs/{outputId}` - [Delete output by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-output): `DELETE` `/api/fleet/outputs/{outputId}`, `DELETE` `/s/{space_id}/api/fleet/outputs/{outputId}` - [Get latest output health](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-output-health): `GET` `/api/fleet/outputs/{outputId}/health`, `GET` `/s/{space_id}/api/fleet/outputs/{outputId}/health` ### [Fleet package policies](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-fleet-package-policies) - [List package policies](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-package-policies): `GET` `/api/fleet/package_policies`, `GET` `/s/{space_id}/api/fleet/package_policies` - [Create package policy](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-create-package-policy): `POST` `/api/fleet/package_policies`, `POST` `/s/{space_id}/api/fleet/package_policies` - [Bulk get package policies](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-bulk-get-package-policies): `POST` `/api/fleet/package_policies/_bulk_get`, `POST` `/s/{space_id}/api/fleet/package_policies/_bulk_get` - [Delete package policy](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-delete-package-policy): `POST` `/api/fleet/package_policies/delete`, `POST` `/s/{space_id}/api/fleet/package_policies/delete` - [Upgrade package policy to a newer package version](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-upgrade-package-policy): `POST` `/api/fleet/package_policies/upgrade`, `POST` `/s/{space_id}/api/fleet/package_policies/upgrade` - [Dry run package policy upgrade](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-upgrade-package-policy-dry-run): `POST` `/api/fleet/package_policies/upgrade/dryrun`, `POST` `/s/{space_id}/api/fleet/package_policies/upgrade/dryrun` - [Get package policy by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-package-policy): `GET` `/api/fleet/package_policies/{packagePolicyId}`, `GET` `/s/{space_id}/api/fleet/package_policies/{packagePolicyId}` - [Update package policy by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-update-package-policy): `PUT` `/api/fleet/package_policies/{packagePolicyId}`, `PUT` `/s/{space_id}/api/fleet/package_policies/{packagePolicyId}` - [Delete package policy by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-package-policy): `DELETE` `/api/fleet/package_policies/{packagePolicyId}`, `DELETE` `/s/{space_id}/api/fleet/package_policies/{packagePolicyId}` ### [Fleet proxies](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-fleet-proxies) - [List proxies](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-fleet-proxies): `GET` `/api/fleet/proxies`, `GET` `/s/{space_id}/api/fleet/proxies` - [Create proxy](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-fleet-proxies): `POST` `/api/fleet/proxies`, `POST` `/s/{space_id}/api/fleet/proxies` - [Get proxy by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-one-fleet-proxies): `GET` `/api/fleet/proxies/{itemId}`, `GET` `/s/{space_id}/api/fleet/proxies/{itemId}` - [Update proxy by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-update-fleet-proxies): `PUT` `/api/fleet/proxies/{itemId}`, `PUT` `/s/{space_id}/api/fleet/proxies/{itemId}` - [Delete proxy by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-fleet-proxies): `DELETE` `/api/fleet/proxies/{itemId}`, `DELETE` `/s/{space_id}/api/fleet/proxies/{itemId}` ### [Fleet Server hosts](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-fleet-server-hosts) - [List Fleet Server hosts](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-fleet-server-hosts): `GET` `/api/fleet/fleet_server_hosts`, `GET` `/s/{space_id}/api/fleet/fleet_server_hosts` - [Create Fleet Server host](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-fleet-server-hosts): `POST` `/api/fleet/fleet_server_hosts`, `POST` `/s/{space_id}/api/fleet/fleet_server_hosts` - [Get Fleet Server host by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-one-fleet-server-hosts): `GET` `/api/fleet/fleet_server_hosts/{itemId}`, `GET` `/s/{space_id}/api/fleet/fleet_server_hosts/{itemId}` - [Update Fleet Server host by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-update-fleet-server-hosts): `PUT` `/api/fleet/fleet_server_hosts/{itemId}`, `PUT` `/s/{space_id}/api/fleet/fleet_server_hosts/{itemId}` - [Delete Fleet Server host by ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-fleet-server-hosts): `DELETE` `/api/fleet/fleet_server_hosts/{itemId}`, `DELETE` `/s/{space_id}/api/fleet/fleet_server_hosts/{itemId}` ### [Fleet service tokens](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-fleet-service-tokens) - [Create service token](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-generate-service-token-deprecated): `POST` `/api/fleet/service-tokens`, `POST` `/s/{space_id}/api/fleet/service-tokens` - [Create service token](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-generate-service-token): `POST` `/api/fleet/service_tokens`, `POST` `/s/{space_id}/api/fleet/service_tokens` ### [Fleet uninstall tokens](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-fleet-uninstall-tokens) - [List metadata for latest uninstall tokens per agent policy](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-uninstall-tokens): `GET` `/api/fleet/uninstall_tokens`, `GET` `/s/{space_id}/api/fleet/uninstall_tokens` - [Get one decrypted uninstall token by its ID](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-uninstall-token): `GET` `/api/fleet/uninstall_tokens/{uninstallTokenId}`, `GET` `/s/{space_id}/api/fleet/uninstall_tokens/{uninstallTokenId}` ### [Logstash configuration management](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-logstash) - [Get a Logstash pipeline](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-logstash-pipeline): `GET` `/api/logstash/pipeline/{id}` - [Create or update a Logstash pipeline](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-put-logstash-pipeline): `PUT` `/api/logstash/pipeline/{id}` - [Delete a Logstash pipeline](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-logstash-pipeline): `DELETE` `/api/logstash/pipeline/{id}` - [Get all Logstash pipelines](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-logstash-pipelines): `GET` `/api/logstash/pipelines` ### [Machine learning](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-ml) - [Sync saved objects in the default space](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-mlsync): `GET` `/api/ml/saved_objects/sync`, `GET` `/s/{space_id}/api/ml/saved_objects/sync` ### [Maintenance windows](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-maintenance-window) - [Create a maintenance window.](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-maintenance-window): `POST` `/api/maintenance_window`, `POST` `/s/{space_id}/api/maintenance_window` - [Get maintenance window details.](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-maintenance-window-id): `GET` `/api/maintenance_window/{id}`, `GET` `/s/{space_id}/api/maintenance_window/{id}` - [Update a maintenance window.](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-patch-maintenance-window-id): `PATCH` `/api/maintenance_window/{id}`, `PATCH` `/s/{space_id}/api/maintenance_window/{id}` - [Delete a maintenance window.](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-maintenance-window-id): `DELETE` `/api/maintenance_window/{id}`, `DELETE` `/s/{space_id}/api/maintenance_window/{id}` - [Archive a maintenance window.](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-maintenance-window-id-archive): `POST` `/api/maintenance_window/{id}/_archive`, `POST` `/s/{space_id}/api/maintenance_window/{id}/_archive` - [Unarchive a maintenance window.](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-maintenance-window-id-unarchive): `POST` `/api/maintenance_window/{id}/_unarchive`, `POST` `/s/{space_id}/api/maintenance_window/{id}/_unarchive` ### [Roles](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-roles) - [Get all roles](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-security-role): `GET` `/api/security/role` - [Get a role](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-security-role-name): `GET` `/api/security/role/{name}` - [Create or update a role](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-put-security-role-name): `PUT` `/api/security/role/{name}` - [Delete a role](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-security-role-name): `DELETE` `/api/security/role/{name}` - [Create or update roles](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-security-roles): `POST` `/api/security/roles` ### [Saved objects](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-saved-objects) - [Rotate a key for encrypted saved objects](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-rotateencryptionkey): `POST` `/api/encrypted_saved_objects/_rotate_key` - [Create saved objects](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-bulkcreatesavedobjects): `POST` `/api/saved_objects/_bulk_create`, `POST` `/s/{space_id}/api/saved_objects/_bulk_create` - [Delete saved objects](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-bulkdeletesavedobjects): `POST` `/api/saved_objects/_bulk_delete`, `POST` `/s/{space_id}/api/saved_objects/_bulk_delete` - [Get saved objects](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-bulkgetsavedobjects): `POST` `/api/saved_objects/_bulk_get`, `POST` `/s/{space_id}/api/saved_objects/_bulk_get` - [Resolve saved objects](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-bulkresolvesavedobjects): `POST` `/api/saved_objects/_bulk_resolve`, `POST` `/s/{space_id}/api/saved_objects/_bulk_resolve` - [Update saved objects](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-bulkupdatesavedobjects): `POST` `/api/saved_objects/_bulk_update`, `POST` `/s/{space_id}/api/saved_objects/_bulk_update` - [Export saved objects](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-exportsavedobjectsdefault): `POST` `/api/saved_objects/_export`, `POST` `/s/{space_id}/api/saved_objects/_export` - [Search for saved objects](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-findsavedobjects): `GET` `/api/saved_objects/_find`, `GET` `/s/{space_id}/api/saved_objects/_find` - [Import saved objects](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-importsavedobjectsdefault): `POST` `/api/saved_objects/_import`, `POST` `/s/{space_id}/api/saved_objects/_import` - [Resolve import errors](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-resolveimporterrors): `POST` `/api/saved_objects/_resolve_import_errors`, `POST` `/s/{space_id}/api/saved_objects/_resolve_import_errors` - [Resolve a saved object](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-resolvesavedobject): `GET` `/api/saved_objects/resolve/{type}/{id}`, `GET` `/s/{space_id}/api/saved_objects/resolve/{type}/{id}` - [Create a saved object](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createsavedobject): `POST` `/api/saved_objects/{type}`, `POST` `/s/{space_id}/api/saved_objects/{type}` - [Get a saved object](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getsavedobject): `GET` `/api/saved_objects/{type}/{id}`, `GET` `/s/{space_id}/api/saved_objects/{type}/{id}` - [Create a saved object](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createsavedobjectid): `POST` `/api/saved_objects/{type}/{id}`, `POST` `/s/{space_id}/api/saved_objects/{type}/{id}` - [Update a saved object](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-updatesavedobject): `PUT` `/api/saved_objects/{type}/{id}`, `PUT` `/s/{space_id}/api/saved_objects/{type}/{id}` ### [Security AI assistant](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-security-ai-assistant-api) - [Apply a bulk action to anonymization fields](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-performanonymizationfieldsbulkaction): `POST` `/api/security_ai_assistant/anonymization_fields/_bulk_action`, `POST` `/s/{space_id}/api/security_ai_assistant/anonymization_fields/_bulk_action` - [Get anonymization fields](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-findanonymizationfields): `GET` `/api/security_ai_assistant/anonymization_fields/_find`, `GET` `/s/{space_id}/api/security_ai_assistant/anonymization_fields/_find` - [Create a model response](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-chatcomplete): `POST` `/api/security_ai_assistant/chat/complete`, `POST` `/s/{space_id}/api/security_ai_assistant/chat/complete` - [Create a conversation](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createconversation): `POST` `/api/security_ai_assistant/current_user/conversations`, `POST` `/s/{space_id}/api/security_ai_assistant/current_user/conversations` - [Delete conversations](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deleteallconversations): `DELETE` `/api/security_ai_assistant/current_user/conversations`, `DELETE` `/s/{space_id}/api/security_ai_assistant/current_user/conversations` - [Get conversations](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-findconversations): `GET` `/api/security_ai_assistant/current_user/conversations/_find`, `GET` `/s/{space_id}/api/security_ai_assistant/current_user/conversations/_find` - [Get a conversation](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-readconversation): `GET` `/api/security_ai_assistant/current_user/conversations/{id}`, `GET` `/s/{space_id}/api/security_ai_assistant/current_user/conversations/{id}` - [Update a conversation](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-updateconversation): `PUT` `/api/security_ai_assistant/current_user/conversations/{id}`, `PUT` `/s/{space_id}/api/security_ai_assistant/current_user/conversations/{id}` - [Delete a conversation](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deleteconversation): `DELETE` `/api/security_ai_assistant/current_user/conversations/{id}`, `DELETE` `/s/{space_id}/api/security_ai_assistant/current_user/conversations/{id}` - [Create a Knowledge Base Entry](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createknowledgebaseentry): `POST` `/api/security_ai_assistant/knowledge_base/entries`, `POST` `/s/{space_id}/api/security_ai_assistant/knowledge_base/entries` - [Applies a bulk action to multiple Knowledge Base Entries](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-performknowledgebaseentrybulkaction): `POST` `/api/security_ai_assistant/knowledge_base/entries/_bulk_action`, `POST` `/s/{space_id}/api/security_ai_assistant/knowledge_base/entries/_bulk_action` - [Finds Knowledge Base Entries that match the given query.](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-findknowledgebaseentries): `GET` `/api/security_ai_assistant/knowledge_base/entries/_find`, `GET` `/s/{space_id}/api/security_ai_assistant/knowledge_base/entries/_find` - [Read a Knowledge Base Entry](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-readknowledgebaseentry): `GET` `/api/security_ai_assistant/knowledge_base/entries/{id}`, `GET` `/s/{space_id}/api/security_ai_assistant/knowledge_base/entries/{id}` - [Update a Knowledge Base Entry](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-updateknowledgebaseentry): `PUT` `/api/security_ai_assistant/knowledge_base/entries/{id}`, `PUT` `/s/{space_id}/api/security_ai_assistant/knowledge_base/entries/{id}` - [Deletes a single Knowledge Base Entry using the `id` field](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deleteknowledgebaseentry): `DELETE` `/api/security_ai_assistant/knowledge_base/entries/{id}`, `DELETE` `/s/{space_id}/api/security_ai_assistant/knowledge_base/entries/{id}` - [Read a KnowledgeBase](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-readknowledgebase): `GET` `/api/security_ai_assistant/knowledge_base/{resource}`, `GET` `/s/{space_id}/api/security_ai_assistant/knowledge_base/{resource}` - [Create a KnowledgeBase](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createknowledgebase): `POST` `/api/security_ai_assistant/knowledge_base/{resource}`, `POST` `/s/{space_id}/api/security_ai_assistant/knowledge_base/{resource}` - [Apply a bulk action to prompts](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-performpromptsbulkaction): `POST` `/api/security_ai_assistant/prompts/_bulk_action`, `POST` `/s/{space_id}/api/security_ai_assistant/prompts/_bulk_action` - [Get prompts](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-findprompts): `GET` `/api/security_ai_assistant/prompts/_find`, `GET` `/s/{space_id}/api/security_ai_assistant/prompts/_find` ### [Security detections](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-security-detections-api) - [Reads the alert index name if it exists](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-readalertsindex): `GET` `/api/detection_engine/index`, `GET` `/s/{space_id}/api/detection_engine/index` - [Create an alerts index](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createalertsindex): `POST` `/api/detection_engine/index`, `POST` `/s/{space_id}/api/detection_engine/index` - [Delete an alerts index](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deletealertsindex): `DELETE` `/api/detection_engine/index`, `DELETE` `/s/{space_id}/api/detection_engine/index` - [Returns user privileges for the Kibana space](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-readprivileges): `GET` `/api/detection_engine/privileges`, `GET` `/s/{space_id}/api/detection_engine/privileges` - [Retrieve a detection rule](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-readrule): `GET` `/api/detection_engine/rules`, `GET` `/s/{space_id}/api/detection_engine/rules` - [Create a detection rule](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createrule): `POST` `/api/detection_engine/rules`, `POST` `/s/{space_id}/api/detection_engine/rules` - [Update a detection rule](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-updaterule): `PUT` `/api/detection_engine/rules`, `PUT` `/s/{space_id}/api/detection_engine/rules` - [Patch a detection rule](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-patchrule): `PATCH` `/api/detection_engine/rules`, `PATCH` `/s/{space_id}/api/detection_engine/rules` - [Delete a detection rule](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deleterule): `DELETE` `/api/detection_engine/rules`, `DELETE` `/s/{space_id}/api/detection_engine/rules` - [Apply a bulk action to detection rules](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-performrulesbulkaction): `POST` `/api/detection_engine/rules/_bulk_action`, `POST` `/s/{space_id}/api/detection_engine/rules/_bulk_action` - [Create multiple detection rules](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-bulkcreaterules): `POST` `/api/detection_engine/rules/_bulk_create`, `POST` `/s/{space_id}/api/detection_engine/rules/_bulk_create` - [Delete multiple detection rules](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-bulkdeleterulespost): `POST` (also `DELETE`) `/api/detection_engine/rules/_bulk_delete`, `POST` `/s/{space_id}/api/detection_engine/rules/_bulk_delete` - [Update multiple detection rules](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-bulkupdaterules): `PUT` `/api/detection_engine/rules/_bulk_update`, `PUT` `/s/{space_id}/api/detection_engine/rules/_bulk_update` - [Patch multiple detection rules](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-bulkpatchrules): `PATCH` `/api/detection_engine/rules/_bulk_update`, `PATCH` `/s/{space_id}/api/detection_engine/rules/_bulk_update` - [Export detection rules](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-exportrules): `POST` `/api/detection_engine/rules/_export`, `POST` `/s/{space_id}/api/detection_engine/rules/_export` - [List all detection rules](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-findrules): `GET` `/api/detection_engine/rules/_find`, `GET` `/s/{space_id}/api/detection_engine/rules/_find` - [Import detection rules](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-importrules): `POST` `/api/detection_engine/rules/_import`, `POST` `/s/{space_id}/api/detection_engine/rules/_import` - [Install prebuilt detection rules and Timelines](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-installprebuiltrulesandtimelines): `PUT` `/api/detection_engine/rules/prepackaged`, `PUT` `/s/{space_id}/api/detection_engine/rules/prepackaged` - [Retrieve the status of prebuilt detection rules and Timelines](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-readprebuiltrulesandtimelinesstatus): `GET` `/api/detection_engine/rules/prepackaged/_status`, `GET` `/s/{space_id}/api/detection_engine/rules/prepackaged/_status` - [Preview rule alerts generated on specified time range](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-rulepreview): `POST` `/api/detection_engine/rules/preview`, `POST` `/s/{space_id}/api/detection_engine/rules/preview` - [Assign and unassign users from detection alerts](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-setalertassignees): `POST` `/api/detection_engine/signals/assignees`, `POST` `/s/{space_id}/api/detection_engine/signals/assignees` - [Finalize detection alert migrations](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-finalizealertsmigration): `POST` `/api/detection_engine/signals/finalize_migration`, `POST` `/s/{space_id}/api/detection_engine/signals/finalize_migration` - [Initiate a detection alert migration](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createalertsmigration): `POST` `/api/detection_engine/signals/migration`, `POST` `/s/{space_id}/api/detection_engine/signals/migration` - [Clean up detection alert migrations](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-alertsmigrationcleanup): `DELETE` `/api/detection_engine/signals/migration`, `DELETE` `/s/{space_id}/api/detection_engine/signals/migration` - [Retrieve the status of detection alert migrations](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-readalertsmigrationstatus): `POST` `/api/detection_engine/signals/migration_status`, `POST` `/s/{space_id}/api/detection_engine/signals/migration_status` - [Find and/or aggregate detection alerts](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-searchalerts): `POST` `/api/detection_engine/signals/search`, `POST` `/s/{space_id}/api/detection_engine/signals/search` - [Set a detection alert status](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-setalertsstatus): `POST` `/api/detection_engine/signals/status`, `POST` `/s/{space_id}/api/detection_engine/signals/status` - [Add and remove detection alert tags](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-setalerttags): `POST` `/api/detection_engine/signals/tags`, `POST` `/s/{space_id}/api/detection_engine/signals/tags` - [List all detection rule tags](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-readtags): `GET` `/api/detection_engine/tags`, `GET` `/s/{space_id}/api/detection_engine/tags` ### [Security Elastic Endpoint exceptions](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-security-endpoint-exceptions-api) - [Create an Elastic Endpoint rule exception list](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createendpointlist): `POST` `/api/endpoint_list`, `POST` `/s/{space_id}/api/endpoint_list` - [Get an Elastic Endpoint rule exception list item](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-readendpointlistitem): `GET` `/api/endpoint_list/items`, `GET` `/s/{space_id}/api/endpoint_list/items` - [Create an Elastic Endpoint rule exception list item](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createendpointlistitem): `POST` `/api/endpoint_list/items`, `POST` `/s/{space_id}/api/endpoint_list/items` - [Update an Elastic Endpoint rule exception list item](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-updateendpointlistitem): `PUT` `/api/endpoint_list/items`, `PUT` `/s/{space_id}/api/endpoint_list/items` - [Delete an Elastic Endpoint exception list item](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deleteendpointlistitem): `DELETE` `/api/endpoint_list/items`, `DELETE` `/s/{space_id}/api/endpoint_list/items` - [Get Elastic Endpoint exception list items](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-findendpointlistitems): `GET` `/api/endpoint_list/items/_find`, `GET` `/s/{space_id}/api/endpoint_list/items/_find` ### [Security endpoint management](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-security-endpoint-management-api) - [Get response actions](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-endpointgetactionslist): `GET` `/api/endpoint/action`, `GET` `/s/{space_id}/api/endpoint/action` - [Run a command](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-endpointexecuteaction): `POST` `/api/endpoint/action/execute`, `POST` `/s/{space_id}/api/endpoint/action/execute` - [Get a file](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-endpointgetfileaction): `POST` `/api/endpoint/action/get_file`, `POST` `/s/{space_id}/api/endpoint/action/get_file` - [Isolate an endpoint](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-endpointisolateaction): `POST` `/api/endpoint/action/isolate`, `POST` `/s/{space_id}/api/endpoint/action/isolate` - [Terminate a process](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-endpointkillprocessaction): `POST` `/api/endpoint/action/kill_process`, `POST` `/s/{space_id}/api/endpoint/action/kill_process` - [Get running processes](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-endpointgetprocessesaction): `POST` `/api/endpoint/action/running_procs`, `POST` `/s/{space_id}/api/endpoint/action/running_procs` - [Run a script](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-runscriptaction): `POST` `/api/endpoint/action/runscript`, `POST` `/s/{space_id}/api/endpoint/action/runscript` - [Scan a file or directory](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-endpointscanaction): `POST` `/api/endpoint/action/scan`, `POST` `/s/{space_id}/api/endpoint/action/scan` - [Get actions state](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-endpointgetactionsstate): `GET` `/api/endpoint/action/state`, `GET` `/s/{space_id}/api/endpoint/action/state` - [Suspend a process](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-endpointsuspendprocessaction): `POST` `/api/endpoint/action/suspend_process`, `POST` `/s/{space_id}/api/endpoint/action/suspend_process` - [Release an isolated endpoint](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-endpointunisolateaction): `POST` `/api/endpoint/action/unisolate`, `POST` `/s/{space_id}/api/endpoint/action/unisolate` - [Upload a file](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-endpointuploadaction): `POST` `/api/endpoint/action/upload`, `POST` `/s/{space_id}/api/endpoint/action/upload` - [Get action details](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-endpointgetactionsdetails): `GET` `/api/endpoint/action/{action_id}`, `GET` `/s/{space_id}/api/endpoint/action/{action_id}` - [Get file information](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-endpointfileinfo): `GET` `/api/endpoint/action/{action_id}/file/{file_id}`, `GET` `/s/{space_id}/api/endpoint/action/{action_id}/file/{file_id}` - [Download a file](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-endpointfiledownload): `GET` `/api/endpoint/action/{action_id}/file/{file_id}/download`, `GET` `/s/{space_id}/api/endpoint/action/{action_id}/file/{file_id}/download` - [Get an action request log](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-endpointgetactionlog): `GET` `/api/endpoint/action_log/{agent_id}`, `GET` `/s/{space_id}/api/endpoint/action_log/{agent_id}` - [Get response actions status](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-endpointgetactionsstatus): `GET` `/api/endpoint/action_status`, `GET` `/s/{space_id}/api/endpoint/action_status` - [Isolate an endpoint](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-endpointisolateredirect): `POST` `/api/endpoint/isolate`, `POST` `/s/{space_id}/api/endpoint/isolate` - [Get a metadata list](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getendpointmetadatalist): `GET` `/api/endpoint/metadata`, `GET` `/s/{space_id}/api/endpoint/metadata` - [Get metadata transforms](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getendpointmetadatatransform): `GET` `/api/endpoint/metadata/transforms`, `GET` `/s/{space_id}/api/endpoint/metadata/transforms` - [Get metadata](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getendpointmetadata): `GET` `/api/endpoint/metadata/{id}`, `GET` `/s/{space_id}/api/endpoint/metadata/{id}` - [Get an agent policy summary](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getagentpolicysummary): `GET` `/api/endpoint/policy/summaries`, `GET` `/s/{space_id}/api/endpoint/policy/summaries` - [Get a policy response](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getpolicyresponse): `GET` `/api/endpoint/policy_response`, `GET` `/s/{space_id}/api/endpoint/policy_response` - [Get a protection updates note](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getprotectionupdatesnote): `GET` `/api/endpoint/protection_updates_note/{package_policy_id}`, `GET` `/s/{space_id}/api/endpoint/protection_updates_note/{package_policy_id}` - [Create or update a protection updates note](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createupdateprotectionupdatesnote): `POST` `/api/endpoint/protection_updates_note/{package_policy_id}`, `POST` `/s/{space_id}/api/endpoint/protection_updates_note/{package_policy_id}` - [Get suggestions](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getendpointsuggestions): `POST` `/api/endpoint/suggestions/{suggestion_type}`, `POST` `/s/{space_id}/api/endpoint/suggestions/{suggestion_type}` - [Release an isolated endpoint](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-endpointunisolateredirect): `POST` `/api/endpoint/unisolate`, `POST` `/s/{space_id}/api/endpoint/unisolate` ### [Security entity analytics](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-security-entity-analytics-api) - [Get an asset criticality record](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getassetcriticalityrecord): `GET` `/api/asset_criticality`, `GET` `/s/{space_id}/api/asset_criticality` - [Upsert an asset criticality record](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createassetcriticalityrecord): `POST` `/api/asset_criticality`, `POST` `/s/{space_id}/api/asset_criticality` - [Delete an asset criticality record](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deleteassetcriticalityrecord): `DELETE` `/api/asset_criticality`, `DELETE` `/s/{space_id}/api/asset_criticality` - [Bulk upsert asset criticality records](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-bulkupsertassetcriticalityrecords): `POST` `/api/asset_criticality/bulk`, `POST` `/s/{space_id}/api/asset_criticality/bulk` - [List asset criticality records](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-findassetcriticalityrecords): `GET` `/api/asset_criticality/list`, `GET` `/s/{space_id}/api/asset_criticality/list` - [Initialize the Entity Store](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-initentitystore): `POST` `/api/entity_store/enable`, `POST` `/s/{space_id}/api/entity_store/enable` - [List the Entity Engines](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-listentityengines): `GET` `/api/entity_store/engines`, `GET` `/s/{space_id}/api/entity_store/engines` - [Apply DataView indices to all installed engines](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-applyentityenginedataviewindices): `POST` `/api/entity_store/engines/apply_dataview_indices`, `POST` `/s/{space_id}/api/entity_store/engines/apply_dataview_indices` - [Get an Entity Engine](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getentityengine): `GET` `/api/entity_store/engines/{entityType}`, `GET` `/s/{space_id}/api/entity_store/engines/{entityType}` - [Delete the Entity Engine](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deleteentityengine): `DELETE` `/api/entity_store/engines/{entityType}`, `DELETE` `/s/{space_id}/api/entity_store/engines/{entityType}` - [Initialize an Entity Engine](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-initentityengine): `POST` `/api/entity_store/engines/{entityType}/init`, `POST` `/s/{space_id}/api/entity_store/engines/{entityType}/init` - [Start an Entity Engine](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-startentityengine): `POST` `/api/entity_store/engines/{entityType}/start`, `POST` `/s/{space_id}/api/entity_store/engines/{entityType}/start` - [Stop an Entity Engine](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-stopentityengine): `POST` `/api/entity_store/engines/{entityType}/stop`, `POST` `/s/{space_id}/api/entity_store/engines/{entityType}/stop` - [List Entity Store Entities](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-listentities): `GET` `/api/entity_store/entities/list`, `GET` `/s/{space_id}/api/entity_store/entities/list` - [Get the status of the Entity Store](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getentitystorestatus): `GET` `/api/entity_store/status`, `GET` `/s/{space_id}/api/entity_store/status` - [Cleanup the Risk Engine](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-cleanupriskengine): `DELETE` `/api/risk_score/engine/dangerously_delete_data`, `DELETE` `/s/{space_id}/api/risk_score/engine/dangerously_delete_data` - [Configure the Risk Engine Saved Object](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-configureriskenginesavedobject): `PATCH` `/api/risk_score/engine/saved_object/configure`, `PATCH` `/s/{space_id}/api/risk_score/engine/saved_object/configure` - [Run the risk scoring engine](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-scheduleriskenginenow): `POST` `/api/risk_score/engine/schedule_now`, `POST` `/s/{space_id}/api/risk_score/engine/schedule_now` ### [Security exceptions](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-security-exceptions-api) - [Create rule exception list items](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createruleexceptionlistitems): `POST` `/api/detection_engine/rules/{id}/exceptions`, `POST` `/s/{space_id}/api/detection_engine/rules/{id}/exceptions` - [Get exception list details](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-readexceptionlist): `GET` `/api/exception_lists`, `GET` `/s/{space_id}/api/exception_lists` - [Create an exception list](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createexceptionlist): `POST` `/api/exception_lists`, `POST` `/s/{space_id}/api/exception_lists` - [Update an exception list](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-updateexceptionlist): `PUT` `/api/exception_lists`, `PUT` `/s/{space_id}/api/exception_lists` - [Delete an exception list](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deleteexceptionlist): `DELETE` `/api/exception_lists`, `DELETE` `/s/{space_id}/api/exception_lists` - [Duplicate an exception list](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-duplicateexceptionlist): `POST` `/api/exception_lists/_duplicate`, `POST` `/s/{space_id}/api/exception_lists/_duplicate` - [Export an exception list](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-exportexceptionlist): `POST` `/api/exception_lists/_export`, `POST` `/s/{space_id}/api/exception_lists/_export` - [Get exception lists](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-findexceptionlists): `GET` `/api/exception_lists/_find`, `GET` `/s/{space_id}/api/exception_lists/_find` - [Import an exception list](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-importexceptionlist): `POST` `/api/exception_lists/_import`, `POST` `/s/{space_id}/api/exception_lists/_import` - [Get an exception list item](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-readexceptionlistitem): `GET` `/api/exception_lists/items`, `GET` `/s/{space_id}/api/exception_lists/items` - [Create an exception list item](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createexceptionlistitem): `POST` `/api/exception_lists/items`, `POST` `/s/{space_id}/api/exception_lists/items` - [Update an exception list item](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-updateexceptionlistitem): `PUT` `/api/exception_lists/items`, `PUT` `/s/{space_id}/api/exception_lists/items` - [Delete an exception list item](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deleteexceptionlistitem): `DELETE` `/api/exception_lists/items`, `DELETE` `/s/{space_id}/api/exception_lists/items` - [Get exception list items](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-findexceptionlistitems): `GET` `/api/exception_lists/items/_find`, `GET` `/s/{space_id}/api/exception_lists/items/_find` - [Get an exception list summary](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-readexceptionlistsummary): `GET` `/api/exception_lists/summary`, `GET` `/s/{space_id}/api/exception_lists/summary` - [Create a shared exception list](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createsharedexceptionlist): `POST` `/api/exceptions/shared`, `POST` `/s/{space_id}/api/exceptions/shared` ### [Security lists](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-security-lists-api) - [Get list details](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-readlist): `GET` `/api/lists`, `GET` `/s/{space_id}/api/lists` - [Create a list](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createlist): `POST` `/api/lists`, `POST` `/s/{space_id}/api/lists` - [Update a list](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-updatelist): `PUT` `/api/lists`, `PUT` `/s/{space_id}/api/lists` - [Patch a list](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-patchlist): `PATCH` `/api/lists`, `PATCH` `/s/{space_id}/api/lists` - [Delete a list](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deletelist): `DELETE` `/api/lists`, `DELETE` `/s/{space_id}/api/lists` - [Get lists](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-findlists): `GET` `/api/lists/_find`, `GET` `/s/{space_id}/api/lists/_find` - [Get status of list data streams](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-readlistindex): `GET` `/api/lists/index`, `GET` `/s/{space_id}/api/lists/index` - [Create list data streams](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createlistindex): `POST` `/api/lists/index`, `POST` `/s/{space_id}/api/lists/index` - [Delete list data streams](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deletelistindex): `DELETE` `/api/lists/index`, `DELETE` `/s/{space_id}/api/lists/index` - [Get a list item](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-readlistitem): `GET` `/api/lists/items`, `GET` `/s/{space_id}/api/lists/items` - [Create a list item](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createlistitem): `POST` `/api/lists/items`, `POST` `/s/{space_id}/api/lists/items` - [Update a list item](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-updatelistitem): `PUT` `/api/lists/items`, `PUT` `/s/{space_id}/api/lists/items` - [Patch a list item](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-patchlistitem): `PATCH` `/api/lists/items`, `PATCH` `/s/{space_id}/api/lists/items` - [Delete a list item](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deletelistitem): `DELETE` `/api/lists/items`, `DELETE` `/s/{space_id}/api/lists/items` - [Export list items](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-exportlistitems): `POST` `/api/lists/items/_export`, `POST` `/s/{space_id}/api/lists/items/_export` - [Get list items](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-findlistitems): `GET` `/api/lists/items/_find`, `GET` `/s/{space_id}/api/lists/items/_find` - [Import list items](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-importlistitems): `POST` `/api/lists/items/_import`, `POST` `/s/{space_id}/api/lists/items/_import` - [Get list privileges](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-readlistprivileges): `GET` `/api/lists/privileges`, `GET` `/s/{space_id}/api/lists/privileges` ### [Security Osquery](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-security-osquery-api) - [Get live queries](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-osqueryfindlivequeries): `GET` `/api/osquery/live_queries`, `GET` `/s/{space_id}/api/osquery/live_queries` - [Create a live query](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-osquerycreatelivequery): `POST` `/api/osquery/live_queries`, `POST` `/s/{space_id}/api/osquery/live_queries` - [Get live query details](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-osquerygetlivequerydetails): `GET` `/api/osquery/live_queries/{id}`, `GET` `/s/{space_id}/api/osquery/live_queries/{id}` - [Get live query results](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-osquerygetlivequeryresults): `GET` `/api/osquery/live_queries/{id}/results/{actionId}`, `GET` `/s/{space_id}/api/osquery/live_queries/{id}/results/{actionId}` - [Get packs](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-osqueryfindpacks): `GET` `/api/osquery/packs`, `GET` `/s/{space_id}/api/osquery/packs` - [Create a pack](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-osquerycreatepacks): `POST` `/api/osquery/packs`, `POST` `/s/{space_id}/api/osquery/packs` - [Get pack details](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-osquerygetpacksdetails): `GET` `/api/osquery/packs/{id}`, `GET` `/s/{space_id}/api/osquery/packs/{id}` - [Update a pack](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-osqueryupdatepacks): `PUT` `/api/osquery/packs/{id}`, `PUT` `/s/{space_id}/api/osquery/packs/{id}` - [Delete a pack](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-osquerydeletepacks): `DELETE` `/api/osquery/packs/{id}`, `DELETE` `/s/{space_id}/api/osquery/packs/{id}` - [Get saved queries](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-osqueryfindsavedqueries): `GET` `/api/osquery/saved_queries`, `GET` `/s/{space_id}/api/osquery/saved_queries` - [Create a saved query](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-osquerycreatesavedquery): `POST` `/api/osquery/saved_queries`, `POST` `/s/{space_id}/api/osquery/saved_queries` - [Get saved query details](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-osquerygetsavedquerydetails): `GET` `/api/osquery/saved_queries/{id}`, `GET` `/s/{space_id}/api/osquery/saved_queries/{id}` - [Update a saved query](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-osqueryupdatesavedquery): `PUT` `/api/osquery/saved_queries/{id}`, `PUT` `/s/{space_id}/api/osquery/saved_queries/{id}` - [Delete a saved query](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-osquerydeletesavedquery): `DELETE` `/api/osquery/saved_queries/{id}`, `DELETE` `/s/{space_id}/api/osquery/saved_queries/{id}` ### [Security timeline](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-security-timeline-api) - [Get notes](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getnotes): `GET` `/api/note`, `GET` `/s/{space_id}/api/note` - [Add or update a note](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-persistnoteroute): `PATCH` `/api/note`, `PATCH` `/s/{space_id}/api/note` - [Delete a note](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deletenote): `DELETE` `/api/note`, `DELETE` `/s/{space_id}/api/note` - [Pin/unpin an event](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-persistpinnedeventroute): `PATCH` `/api/pinned_event`, `PATCH` `/s/{space_id}/api/pinned_event` - [Get Timeline or Timeline template details](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-gettimeline): `GET` `/api/timeline`, `GET` `/s/{space_id}/api/timeline` - [Create a Timeline or Timeline template](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createtimelines): `POST` `/api/timeline`, `POST` `/s/{space_id}/api/timeline` - [Update a Timeline](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-patchtimeline): `PATCH` `/api/timeline`, `PATCH` `/s/{space_id}/api/timeline` - [Delete Timelines or Timeline templates](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deletetimelines): `DELETE` `/api/timeline`, `DELETE` `/s/{space_id}/api/timeline` - [Copies timeline or timeline template](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-copytimeline): `GET` `/api/timeline/_copy`, `GET` `/s/{space_id}/api/timeline/_copy` - [Get draft Timeline or Timeline template details](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getdrafttimelines): `GET` `/api/timeline/_draft`, `GET` `/s/{space_id}/api/timeline/_draft` - [Create a clean draft Timeline or Timeline template](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-cleandrafttimelines): `POST` `/api/timeline/_draft`, `POST` `/s/{space_id}/api/timeline/_draft` - [Export Timelines](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-exporttimelines): `POST` `/api/timeline/_export`, `POST` `/s/{space_id}/api/timeline/_export` - [Favorite a Timeline or Timeline template](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-persistfavoriteroute): `PATCH` `/api/timeline/_favorite`, `PATCH` `/s/{space_id}/api/timeline/_favorite` - [Import Timelines](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-importtimelines): `POST` `/api/timeline/_import`, `POST` `/s/{space_id}/api/timeline/_import` - [Install prepackaged Timelines](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-installprepackedtimelines): `POST` `/api/timeline/_prepackaged`, `POST` `/s/{space_id}/api/timeline/_prepackaged` - [Get an existing saved Timeline or Timeline template](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-resolvetimeline): `GET` `/api/timeline/resolve`, `GET` `/s/{space_id}/api/timeline/resolve` - [Get Timelines or Timeline templates](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-gettimelines): `GET` `/api/timelines`, `GET` `/s/{space_id}/api/timelines` ### [Service level objectives](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-slo) - [Get a paginated list of SLOs](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-findslosop): `GET` `/s/{spaceId}/api/observability/slos` - [Create an SLO](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-createsloop): `POST` `/s/{spaceId}/api/observability/slos` - [Bulk delete SLO definitions and their associated summary and rollup data.](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-bulkdeleteop): `POST` `/s/{spaceId}/api/observability/slos/_bulk_delete` - [Retrieve the status of the bulk deletion](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-bulkdeletestatusop): `GET` `/s/{spaceId}/api/observability/slos/_bulk_delete/{taskId}` - [Batch delete rollup and summary data](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deleterollupdataop): `POST` `/s/{spaceId}/api/observability/slos/_bulk_purge_rollup` - [Batch delete rollup and summary data](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deletesloinstancesop): `POST` `/s/{spaceId}/api/observability/slos/_delete_instances` - [Get an SLO](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getsloop): `GET` `/s/{spaceId}/api/observability/slos/{sloId}` - [Update an SLO](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-updatesloop): `PUT` `/s/{spaceId}/api/observability/slos/{sloId}` - [Delete an SLO](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-deletesloop): `DELETE` `/s/{spaceId}/api/observability/slos/{sloId}` - [Reset an SLO](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-resetsloop): `POST` `/s/{spaceId}/api/observability/slos/{sloId}/_reset` - [Disable an SLO](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-disablesloop): `POST` `/s/{spaceId}/api/observability/slos/{sloId}/disable` - [Enable an SLO](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-enablesloop): `POST` `/s/{spaceId}/api/observability/slos/{sloId}/enable` - [Get the SLO definitions](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-getdefinitionsop): `GET` `/s/{spaceId}/internal/observability/slos/_definitions` ### [Short URLs](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-short-url) - [Create a short URL](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-url): `POST` `/api/short_url` - [Resolve a short URL](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-resolve-url): `GET` `/api/short_url/_slug/{slug}` - [Get a short URL](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-url): `GET` `/api/short_url/{id}` - [Delete a short URL](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-url): `DELETE` `/api/short_url/{id}` ### [Spaces](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-spaces) - [Copy saved objects between spaces](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-spaces-copy-saved-objects): `POST` `/api/spaces/_copy_saved_objects` - [Disable legacy URL aliases](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-spaces-disable-legacy-url-aliases): `POST` `/api/spaces/_disable_legacy_url_aliases` - [Get shareable references](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-spaces-get-shareable-references): `POST` `/api/spaces/_get_shareable_references` - [Update saved objects in spaces](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-spaces-update-objects-spaces): `POST` `/api/spaces/_update_objects_spaces` - [Get all spaces](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-spaces-space): `GET` `/api/spaces/space` - [Create a space](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-spaces-space): `POST` `/api/spaces/space` - [Get a space](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-spaces-space-id): `GET` `/api/spaces/space/{id}` - [Update a space](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-put-spaces-space-id): `PUT` `/api/spaces/space/{id}` - [Delete a space](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-spaces-space-id): `DELETE` `/api/spaces/space/{id}` ### [Synthetics](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-synthetics) - [Get monitors](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-synthetic-monitors): `GET` `/api/synthetics/monitors`, `GET` `/s/{space_id}/api/synthetics/monitors` - [Create a monitor](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-synthetic-monitors): `POST` `/api/synthetics/monitors`, `POST` `/s/{space_id}/api/synthetics/monitors` - [Delete monitors](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-synthetic-monitors): `POST` `/api/synthetics/monitors/_bulk_delete`, `POST` `/s/{space_id}/api/synthetics/monitors/_bulk_delete` - [Get a monitor](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-synthetic-monitor): `GET` `/api/synthetics/monitors/{id}`, `GET` `/s/{space_id}/api/synthetics/monitors/{id}` - [Update a monitor](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-put-synthetic-monitor): `PUT` `/api/synthetics/monitors/{id}`, `PUT` `/s/{space_id}/api/synthetics/monitors/{id}` - [Delete a monitor](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-synthetic-monitor): `DELETE` `/api/synthetics/monitors/{id}`, `DELETE` `/s/{space_id}/api/synthetics/monitors/{id}` - [Get parameters](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-parameters): `GET` `/api/synthetics/params`, `GET` `/s/{space_id}/api/synthetics/params` - [Add parameters](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-parameters): `POST` `/api/synthetics/params`, `POST` `/s/{space_id}/api/synthetics/params` - [Delete parameters](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-parameters): `POST` `/api/synthetics/params/_bulk_delete`, `POST` `/s/{space_id}/api/synthetics/params/_bulk_delete` - [Get a parameter](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-parameter): `GET` `/api/synthetics/params/{id}`, `GET` `/s/{space_id}/api/synthetics/params/{id}` - [Update a parameter](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-put-parameter): `PUT` `/api/synthetics/params/{id}`, `PUT` `/s/{space_id}/api/synthetics/params/{id}` - [Delete a parameter](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-parameter): `DELETE` `/api/synthetics/params/{id}`, `DELETE` `/s/{space_id}/api/synthetics/params/{id}` - [Get private locations](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-private-locations): `GET` `/api/synthetics/private_locations`, `GET` `/s/{space_id}/api/synthetics/private_locations` - [Create a private location](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-private-location): `POST` `/api/synthetics/private_locations`, `POST` `/s/{space_id}/api/synthetics/private_locations` - [Get a private location](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-private-location): `GET` `/api/synthetics/private_locations/{id}`, `GET` `/s/{space_id}/api/synthetics/private_locations/{id}` - [Update a private location](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-put-private-location): `PUT` `/api/synthetics/private_locations/{id}`, `PUT` `/s/{space_id}/api/synthetics/private_locations/{id}` - [Delete a private location](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-delete-private-location): `DELETE` `/api/synthetics/private_locations/{id}`, `DELETE` `/s/{space_id}/api/synthetics/private_locations/{id}` ### [System](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-system) - [Get Kibana's current status](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-status): `GET` `/api/status` ### [Task manager](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-task-manager) - [Get the task manager health](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-task-manager-health): `GET` `/api/task_manager/_health` ### [Unknown](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-unknown) - [Query roles](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-security-role-query): `POST` `/api/security/role/_query` - [Resolve conflicts copying saved objects](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-spaces-resolve-copy-saved-objects-errors): `POST` `/api/spaces/_resolve_copy_saved_objects_errors` ### [Upgrade assistant](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-upgrade) - [Batch start or resume reindexing](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-batch-start-upgrade-reindex): `POST` `/api/upgrade_assistant/reindex/batch` - [Get the batch reindex queue](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-batch-upgrade-reindex): `GET` `/api/upgrade_assistant/reindex/batch/queue` - [Get the reindex status](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-upgrade-reindex): `GET` `/api/upgrade_assistant/reindex/{index}` - [Start or resume reindexing](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-start-upgrade-reindex): `POST` `/api/upgrade_assistant/reindex/{index}` - [Cancel reindexing](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-cancel-upgrade-reindex): `POST` `/api/upgrade_assistant/reindex/{index}/cancel` - [Get the upgrade readiness status](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-upgrade-status): `GET` `/api/upgrade_assistant/status` ### [Uptime](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-uptime) - [Get uptime settings](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-get-uptime-settings): `GET` `/api/uptime/settings`, `GET` `/s/{space_id}/api/uptime/settings` - [Update uptime settings](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-put-uptime-settings): `PUT` `/api/uptime/settings`, `PUT` `/s/{space_id}/api/uptime/settings` ### [User session management](https://www.elastic.co/docs/api/doc/kibana/v8/group/endpoint-user-session) - [Invalidate user sessions](https://www.elastic.co/docs/api/doc/kibana/v8/operation/operation-post-security-session-invalidate): `POST` `/api/security/session/_invalidate`