Get an Entity Engine
- Base URL
-
https://{kibana_url}
Auth
Get the engine descriptor for a specific entity type, including its configuration and current status.
-
space_id
string
optional
-
An identifier for the space. If space_id is not provided in the URL, the default space is used. Refer to Spaces for more information.
-
entityType
enum
required
-
The entity type of the engine.
-
Values:
user
host
service
-
delay
string · pattern: [smdh]$ · default: 1m
-
The delay before the transform processes new data, allowing late-arriving documents to be included.
-
docsPerSecond
integer
-
Throttle value for the number of documents processed per second. Use -1 for no throttle.
-
error
object
-
Present when the engine status is error. Describes the failure.
-
-
action
enum
required
-
The lifecycle action that caused the error.
-
Values:
init
-
message
string
required
-
A human-readable error message.
-
fieldHistoryLength
integer
required
-
The number of historical values retained per field.
-
filter
string
-
An optional Kibana Query Language (KQL) filter applied to source documents before aggregation.
-
frequency
string · pattern: [smdh]$ · default: 1m
-
How often the transform runs.
-
indexPattern
string
required
-
An additional Elasticsearch index pattern to include as a source for entity data. Merged with the default data view indices when the engine runs.
-
lookbackPeriod
string · pattern: [smdh]$ · default: 24h
-
How far back the transform looks when calculating aggregations.
-
status
enum
required
-
The current operational status of an entity engine.
-
Values:
installing
started
stopped
updating
error
-
timeout
string · pattern: [smdh]$ · default: 180s
-
The timeout for initializing the aggregating transform.
-
timestampField
string
-
The field used as the timestamp for source documents.
-
type
enum
required
-
The type of entity.
-
Values:
user
host
service
Thank you for your feedback.