Type to search.

stack kb security-entity-analytics-api cli namespace

Serverless Preview

Elastic Cloud Serverless projects are autoscaled environments, fully managed by Elastic and available on Elastic Cloud.

Availability

  • Preview

    This functionality is in technical preview and is ready for evaluation. Use with caution in production; it is not recommended for mission-critical workloads. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features. Specific Support terms apply.

Serverless interfaces and procedures might differ from classic Elastic Stack deployments.

Stack Preview

The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats.

Availability

  • Preview

    This functionality is in technical preview and is ready for evaluation. Use with caution in production; it is not recommended for mission-critical workloads. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features. Specific Support terms apply.

Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments.

This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.

Shell 
elastic stack kb security-entity-analytics-api --help

Kibana security-entity-analytics-api API commands

delete-asset-criticality-record

Delete an asset criticality record

 get-asset-criticality-record

Get an asset criticality record

 create-asset-criticality-record

Upsert an asset criticality record

 bulk-upsert-asset-criticality-records

Bulk upsert asset criticality records

 find-asset-criticality-records

List asset criticality records

 delete-monitoring-engine

Delete the Privilege Monitoring Engine

 disable-monitoring-engine

Disable the Privilege Monitoring Engine

 init-monitoring-engine

Initialize the Privilege Monitoring Engine

 schedule-monitoring-engine

Schedule the Privilege Monitoring Engine

 priv-mon-health

Health check on Privilege Monitoring

 priv-mon-privileges

Run a privileges check on Privilege Monitoring

 create-priv-mon-user

Create a new monitored user

 privmon-bulk-upload-users-c-s-v

Upsert multiple monitored users via CSV upload

 delete-priv-mon-user

Delete a monitored user

 update-priv-mon-user

Update a monitored user

 list-priv-mon-users

List all monitored users

 install-privileged-access-detection-package

Installs the privileged access detection package for the Entity Analytics privileged user monitoring experience

 get-privileged-access-detection-package-status

Gets the status of the privileged access detection package for the Entity Analytics privileged user monitoring experience

 create-watchlist

Create a new watchlist

 get-watchlist

Get a watchlist by ID

 update-watchlist

Update an existing watchlist

 upload-watchlist-csv

Upload a CSV file to add entities to a watchlist

 assign-watchlist-entities

Manually assign entities to a watchlist

 unassign-watchlist-entities

Manually unassign entities from a watchlist

 list-watchlists

List all watchlists

 clean-up-risk-engine

Cleanup the Risk Engine

 configure-risk-engine-saved-object

Configure the Risk Engine Saved Object

 schedule-risk-engine-now

Run the risk scoring engine

 get-risk-score-history

Get risk score history for an entity