Disable an entity resolution rule

Base URL: https://{kibana_url}

PUT /api/security/entity_store/resolution/rules/{id}/disable
PUT /s/{space_id}/api/security/entity_store/resolution/rules/{id}/disable

Auth

Disable a managed entity resolution rule in this space.

Required privileges

Privileges securitySolution and securitySolution-entity-analytics-manage

Path parameters

space_id string optional: An identifier for the space. If space_id is not provided in the URL, the default space is used. Refer to Spaces for more information.
id string · max length: 100 required: The stable identifier of the entity resolution rule.

Header parameters

kbn-xsrf string required: A required header to protect against CSRF attacks

Responses

200

Updated entity resolution rule.

application/json

404

Unknown entity resolution rule.

application/json

View as Markdown

Base URL: https://{kibana_url}

Examples

Request Console 1 / 2 languages

Console Kibana Dev Tools

PUT kbn:/api/security/entity_store/resolution/rules/ID/disable

Generated from the API spec

curl Shell

curl -X PUT "${KIBANA_URL}/api/security/entity_store/resolution/rules/${ID}/disable" \
  -H "kbn-xsrf: true" \
  -H "Authorization: ApiKey ${API_KEY}"

Generated from the API spec

Response

The related user alias resolution rule was disabled in the current space.

{
  "description": "Related user alias resolution across identity providers",
  "enabled": false,
  "id": "related_user_alias_resolution",
  "kind": "related_user_alias_resolution",
  "managed": true
}

{
  "error": "Not Found",
  "message": "Saved object [entity-resolution-rule/unknown] not found",
  "statusCode": 404
}