Change Updates

Do not miss any Kibana API changes, ever again

Subscribe to the Kibana API changelog to be up to date on recent changes.

RSS

Mar 25, 2025

main
1.0.2
Compare

API structure has changed

186 structure changes including:
42 Additions
139 Modifications
5 Removals
Modified 139 Breaking
GET /api/fleet/outputs
  • Response
  • 200 response Modified
    • application/json content type Modified
      • items property Modified
        • object-1, object-2 alternatives Modified
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/outputs/{outputId}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • object-1, object-2 alternatives Modified
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/outputs/{outputId}/health
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/package_policies
  • Response
  • 200 response Modified
    • application/json content type Modified
      • items property Modified
        • additional_datastreams_permissions property Added
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/package_policies/{packagePolicyId}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • additional_datastreams_permissions property Added
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/proxies
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/proxies/{itemId}
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/settings
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/uninstall_tokens
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/uninstall_tokens/{uninstallTokenId}
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/osquery/live_queries
  • Query
  • query query parameter Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • kuery, page, pageSize, sort, sortOrder query parameters Added
GET /api/osquery/live_queries/{id}
  • Query
  • query query parameter Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
GET /api/osquery/live_queries/{id}/results/{actionId}
  • Query
  • query query parameter Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • kuery, page, pageSize, sort, sortOrder query parameters Added
GET /api/osquery/packs
  • Query
  • query query parameter Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • page, pageSize, sort, sortOrder query parameters Added
GET /api/osquery/saved_queries
  • Query
  • query query parameter Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • page, pageSize, sort, sortOrder query parameters Added
GET /api/security_ai_assistant/current_user/conversations/_find
  • Response
  • 200 response Modified
    • application/json content type Modified
      • data property Modified
        • isDefault property Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
GET /api/security_ai_assistant/current_user/conversations/{id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • isDefault property Removed
        • Removing a resource is always breaking unless it was deprecated before
          Breaking
GET /api/security_ai_assistant/knowledge_base/entries/_find
  • Response
  • 200 response Modified
    • application/json content type Modified
      • data property Modified
        • Security_AI_Assistant_API_DocumentEntryResponseFields, Security_AI_Assistant_API_IndexEntryResponseFields alternatives Modified
GET /api/fleet/check-permissions
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/data_streams
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/enrollment_api_keys
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/enrollment_api_keys/{keyId}
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/epm/categories
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/epm/data_streams
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/epm/packages
  • Response
  • 200 response Modified
    • application/json content type Modified
      • items property Modified
        • installationInfo property Modified
        • type property Modified
          • Combinator is now anyOf
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
  • Query
  • withPackagePoliciesCount query parameter Added
GET /api/fleet/epm/packages/installed
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/epm/packages/limited
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/epm/packages/{pkgName}/stats
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • installationInfo property Modified
        • type property Modified
          • Combinator is now anyOf
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}/{filePath}
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/epm/templates/{pkgName}/{pkgVersion}/inputs
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/epm/verification_key_id
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/fleet_server_hosts
  • Response
  • 200 response Modified
    • application/json content type Modified
      • items property Modified
        • secrets, ssl properties Added
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/fleet_server_hosts/{itemId}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • secrets, ssl properties Added
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/kubernetes
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/kubernetes/download
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
  • 404 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/agent_policies/{agentPolicyId}/copy
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • package_policies property Modified
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/agents
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/agents/actions/{actionId}/cancel
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/agents/bulk_reassign
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/agents/bulk_request_diagnostics
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/agents/bulk_unenroll
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/agents/bulk_update_agent_tags
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/agents/bulk_upgrade
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/agents/setup
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/agents/{agentId}/actions
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/agents/{agentId}/reassign
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/agents/{agentId}/request_diagnostics
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/agents/{agentId}/upgrade
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/enrollment_api_keys
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/epm/bulk_assets
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/epm/custom_integrations
  • Response
  • 200 response Modified
    • application/json content type Modified
      • items property Modified
        • object-1 alternative Modified
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/epm/packages
  • Response
  • 200 response Modified
    • application/gzip; application/zip content type Modified
      • items property Modified
        • object-1 alternative Modified
  • 400 response Modified
    • application/gzip; application/zip content type Modified
      • errorType property Added
POST /api/fleet/epm/packages/_bulk
  • Response
  • 200 response Modified
    • application/json content type Modified
      • items property Modified
        • object-1 alternative Modified
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/security_ai_assistant/knowledge_base/entries/{id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • Security_AI_Assistant_API_DocumentEntryResponseFields alternative Modified
        • global property Added
      • Security_AI_Assistant_API_IndexEntryResponseFields alternative Modified
        • global property Added
GET /api/security_ai_assistant/knowledge_base/{resource}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • index_exists, pipeline_exists properties Removed
        • Removing a resource is always breaking unless it was deprecated before
          Breaking
      • product_documentation_status property Added
GET /api/timeline
  • Response
  • 200 response Modified
    • application/json content type Modified
      • eventType property Modified
        • Property is now deprecated
GET /api/timeline/_copy
  • Body
  • application/json content type Modified
    • timeline property Modified
      • eventType property Modified
        • Property is now deprecated
  • Response
  • 200 response Modified
    • application/json content type Modified
      • eventType property Modified
        • Property is now deprecated
GET /api/timeline/_draft
  • Response
  • 200 response Modified
    • application/json content type Modified
      • eventType property Modified
        • Property is now deprecated
GET /api/timeline/resolve
  • Response
  • 200 response Modified
    • application/json content type Modified
      • timeline property Modified
        • eventType property Modified
          • Property is now deprecated
GET /api/timelines
  • Response
  • 200 response Modified
    • application/json content type Modified
      • timeline property Modified
        • eventType property Modified
          • Property is now deprecated
GET /s/{spaceId}/api/observability/slos
  • Response
  • 200 response Modified
    • application/json content type Modified
      • results property Modified
        • indicator property Modified
      • searchAfter, size properties Added
  • Query
  • size, searchAfter query parameters Added
GET /s/{spaceId}/api/observability/slos/{sloId}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • indicator property Modified
        • SLOs_indicator_properties_custom_metric alternative Modified
PATCH /api/note
  • Body
  • application/json content type Modified
    • eventDataView, eventIngested, eventTimestamp, overrideOwner properties Removed
      • Removing a resource is always breaking unless it was deprecated before
        Breaking
PATCH /api/timeline
  • Body
  • application/json content type Modified
    • timeline property Modified
      • eventType property Modified
        • Property is now deprecated
  • Response
  • 200 response Modified
    • application/json content type Modified
      • eventType property Modified
        • Property is now deprecated
POST /api/entity_store/enable
  • Response
  • 400 response Added
POST /api/entity_store/engines/{entityType}/init
  • Response
  • 400 response Added
POST /api/fleet/agent_download_sources
  • Body
  • application/json content type Modified
    • secrets, ssl properties Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • secrets, ssl properties Added
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/agent_policies
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • package_policies property Modified
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/agent_policies/_bulk_get
  • Response
  • 200 response Modified
    • application/json content type Modified
      • items property Modified
        • package_policies property Modified
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/agent_policies/delete
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/agent_policies/outputs
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/timeline/_draft
  • Response
  • 200 response Modified
    • application/json content type Modified
      • eventType property Modified
        • Property is now deprecated
POST /api/timeline
  • Body
  • application/json content type Modified
    • timeline property Modified
      • eventType property Modified
        • Property is now deprecated
  • Response
  • 200 response Modified
    • application/json content type Modified
      • eventType property Modified
        • Property is now deprecated
POST /api/security_ai_assistant/knowledge_base/entries/_bulk_action
  • Body
  • application/json content type Modified
    • create property Modified
      • Security_AI_Assistant_API_DocumentEntryCreateFields alternative Modified
        • global property Added
      • Security_AI_Assistant_API_IndexEntryCreateFields alternative Modified
        • global property Added
    • update property Modified
      • Security_AI_Assistant_API_DocumentEntryCreateFields alternative Modified
        • global property Added
      • Security_AI_Assistant_API_IndexEntryCreateFields alternative Modified
        • global property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • attributes property Modified
        • results property Modified
POST /api/security_ai_assistant/knowledge_base/entries
  • Body
  • application/json content type Modified
    • Security_AI_Assistant_API_DocumentEntryCreateFields alternative Modified
      • global property Added
    • Security_AI_Assistant_API_IndexEntryCreateFields alternative Modified
      • global property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • Security_AI_Assistant_API_DocumentEntryResponseFields alternative Modified
        • global property Added
      • Security_AI_Assistant_API_IndexEntryResponseFields alternative Modified
        • global property Added
POST /api/security_ai_assistant/current_user/conversations
  • Body
  • application/json content type Modified
    • isDefault property Removed
      • Removing a resource is always breaking unless it was deprecated before
        Breaking
  • Response
  • 200 response Modified
    • application/json content type Modified
      • isDefault property Removed
        • Removing a resource is always breaking unless it was deprecated before
          Breaking
POST /api/fleet/setup
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/service_tokens
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/proxies
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/package_policies/upgrade/dryrun
  • Response
  • 200 response Modified
    • application/json content type Modified
      • agent_diff property Modified
        • array property Modified
      • diff property Modified
        • object-1, object-2 alternatives Modified
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/package_policies/upgrade
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/package_policies/delete
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/package_policies/_bulk_get
  • Response
  • 200 response Modified
    • application/json content type Modified
      • items property Modified
        • additional_datastreams_permissions property Added
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/package_policies
  • Body
  • application/json content type Modified
    • object-1 alternative Modified
      • additional_datastreams_permissions property Added
    • object-2 alternative Modified
      • additional_datastreams_permissions property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • additional_datastreams_permissions property Added
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
  • 409 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/outputs
  • Body
  • application/json content type Modified
    • object-1 alternative Modified
      • secrets property Added
    • object-2 alternative Modified
      • secrets property Modified
        • ssl property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • object-1, object-2 alternatives Modified
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/message_signing_service/rotate_key_pair
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
  • 500 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/logstash_api_keys
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/agent_download_sources
  • Response
  • 200 response Modified
    • application/json content type Modified
      • items property Modified
        • secrets, ssl properties Added
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
PUT /s/{spaceId}/api/observability/slos/{sloId}
  • Body
  • application/json content type Modified
    • indicator property Modified
      • SLOs_indicator_properties_custom_metric alternative Modified
        • params property Modified
  • Response
  • 200 response Modified
    • application/json content type Modified
      • indicator property Modified
        • SLOs_indicator_properties_custom_metric alternative Modified
PUT /api/security_ai_assistant/knowledge_base/entries/{id}
  • Body
  • application/json content type Modified
    • Security_AI_Assistant_API_DocumentEntryCreateFields alternative Modified
      • id property Removed
        • Removing a resource is always breaking unless it was deprecated before
          Breaking
      • global property Added
    • Security_AI_Assistant_API_IndexEntryCreateFields alternative Modified
      • id property Removed
        • Removing a resource is always breaking unless it was deprecated before
          Breaking
      • global property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • Security_AI_Assistant_API_DocumentEntryResponseFields alternative Modified
        • global property Added
      • Security_AI_Assistant_API_IndexEntryResponseFields alternative Modified
        • global property Added
PUT /api/security_ai_assistant/current_user/conversations/{id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • isDefault property Removed
        • Removing a resource is always breaking unless it was deprecated before
          Breaking
PUT /api/osquery/packs/{id}
  • Body
  • application/json content type Modified
    • id property Removed
      • Removing a resource is always breaking unless it was deprecated before
        Breaking
    • name property Added
PUT /api/fleet/settings
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
PUT /api/fleet/proxies/{itemId}
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
PUT /api/fleet/package_policies/{packagePolicyId}
  • Body
  • application/json content type Modified
    • object-1 alternative Modified
      • additional_datastreams_permissions property Added
    • object-2 alternative Modified
      • additional_datastreams_permissions property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • additional_datastreams_permissions property Added
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
  • 403 response Modified
    • application/json content type Modified
      • errorType property Added
PUT /api/fleet/outputs/{outputId}
  • Body
  • application/json content type Modified
    • object-1 alternative Modified
      • secrets property Added
    • object-2 alternative Modified
      • secrets property Modified
        • ssl property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • object-1, object-2 alternatives Modified
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
PUT /api/fleet/fleet_server_hosts/{itemId}
  • Body
  • application/json content type Modified
    • secrets, ssl properties Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • secrets, ssl properties Added
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
PUT /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • installationInfo property Modified
        • type property Modified
          • Combinator is now anyOf
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
PUT /api/fleet/agents/{agentId}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • sort property Modified
          • Type went from array[number | string] to array
            Breaking
        • upgrade_attempts property Added
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
PUT /api/fleet/agent_policies/{agentPolicyId}
  • Body
  • application/json content type Modified
    • bumpRevision property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • package_policies property Modified
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
PUT /api/fleet/agent_download_sources/{sourceId}
  • Body
  • application/json content type Modified
    • secrets, ssl properties Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • secrets, ssl properties Added
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /s/{spaceId}/api/observability/slos/{sloId}/_reset
  • Response
  • 200 response Modified
    • application/json content type Modified
      • indicator property Modified
        • SLOs_indicator_properties_custom_metric alternative Modified
POST /s/{spaceId}/api/observability/slos
  • Body
  • application/json content type Modified
    • indicator property Modified
      • SLOs_indicator_properties_custom_metric alternative Modified
        • params property Modified
POST /api/timeline/_prepackaged
  • Body
  • application/json content type Modified
    • prepackagedTimelines property Modified
      • eventType property Modified
        • Property is now deprecated
    • timelinesToInstall property Modified
      • eventType property Modified
        • Property is now deprecated
    • timelinesToUpdate property Modified
      • eventType property Modified
        • Property is now deprecated
POST /api/timeline/_import
  • Response
  • 400 response Modified
    • application/json content type Modified
      • id property Removed
        • Removing a resource is always breaking unless it was deprecated before
          Breaking
  • 404 response Modified
    • application/json content type Modified
      • id property Removed
        • Removing a resource is always breaking unless it was deprecated before
          Breaking
      • body property Added
  • 409 response Modified
    • application/json content type Modified
      • id property Removed
        • Removing a resource is always breaking unless it was deprecated before
          Breaking
GET /api/fleet/agent_download_sources/{sourceId}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • secrets, ssl properties Added
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/agent_policies
  • Response
  • 200 response Modified
    • application/json content type Modified
      • items property Modified
        • package_policies property Modified
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/agent_policies/{agentPolicyId}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • package_policies property Modified
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/agent_policies/{agentPolicyId}/download
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
  • 404 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/agent_policies/{agentPolicyId}/full
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • object-2 alternative Modified
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/agent_policies/{agentPolicyId}/outputs
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/agent_status
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/agent_status/data
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/agents
  • Response
  • 200 response Modified
    • application/json content type Modified
      • items property Modified
        • sort property Modified
          • Type went from array[number | string] to array
            Breaking
        • upgrade_attempts property Added
      • nextSearchAfter, pit properties Added
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
  • Query
  • searchAfter, openPit, pitId, pitKeepAlive query parameters Added
GET /api/fleet/agents/action_status
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/agents/available_versions
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/agents/files/{fileId}/{fileName}
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/agents/setup
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/agents/tags
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/agents/{agentId}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • sort property Modified
          • Type went from array[number | string] to array
            Breaking
        • upgrade_attempts property Added
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
GET /api/fleet/agents/{agentId}/uploads
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/health_check
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
  • 404 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/fleet_server_hosts
  • Body
  • application/json content type Modified
    • secrets, ssl properties Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • secrets, ssl properties Added
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}/transforms/authorize
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • items property Modified
        • object-1 alternative Modified
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
DELETE /api/fleet/agent_download_sources/{sourceId}
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
DELETE /api/fleet/agents/files/{fileId}
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
DELETE /api/fleet/agents/{agentId}
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
DELETE /api/fleet/enrollment_api_keys/{keyId}
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
DELETE /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • items property Modified
        • object-1 alternative Modified
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
DELETE /api/fleet/fleet_server_hosts/{itemId}
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
DELETE /api/fleet/outputs/{outputId}
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
  • 404 response Modified
    • application/json content type Modified
      • errorType property Added
DELETE /api/fleet/package_policies/{packagePolicyId}
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
DELETE /api/fleet/proxies/{itemId}
  • Response
  • 400 response Modified
    • application/json content type Modified
      • errorType property Added
DELETE /api/security_ai_assistant/current_user/conversations/{id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • isDefault property Removed
        • Removing a resource is always breaking unless it was deprecated before
          Breaking
GET /api/endpoint/action
  • Query
  • query query parameter Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • page, pageSize, commands, agentIds, userIds, startDate, endDate, agentTypes, withOutputs, types query parameters Added
GET /api/endpoint/metadata
  • Query
  • query query parameter Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • page, pageSize, kuery, hostStatuses, sortField, sortDirection query parameters Added
GET /api/entity_store/status
  • Response
  • 200 response Modified
    • application/json content type Modified
      • engines property Modified
        • components property Modified
Removed 5
DELETE /api/detection_engine/rules/_bulk_delete
PATCH /api/detection_engine/rules/_bulk_update
POST /api/detection_engine/rules/_bulk_create
POST /api/detection_engine/rules/_bulk_delete
PUT /api/detection_engine/rules/_bulk_update
Added 42
GET /api/uptime/settings
GET /api/upgrade_assistant/status
GET /api/upgrade_assistant/reindex/{index}
GET /api/upgrade_assistant/reindex/batch/queue
GET /api/upgrade_assistant/add_query_default_field/{index}
GET /api/streams/{name}/dashboards
GET /api/streams/{name}/_ingest
GET /api/streams/{name}/_group
GET /api/streams/{name}
GET /api/streams
GET /api/short_url/{id}
GET /api/short_url/_slug/{slug}
GET /api/logstash/pipelines
GET /api/logstash/pipeline/{id}
GET /api/features
DELETE /api/streams/{name}/dashboards/{dashboardId}
DELETE /api/streams/{name}
DELETE /api/short_url/{id}
DELETE /api/logstash/pipeline/{id}
DELETE /api/fleet/epm/packages/{pkgName}/{pkgVersion}/kibana_assets
DELETE /api/alerting/rule/{ruleId}/snooze_schedule/{scheduleId}
PUT /api/uptime/settings
PUT /api/streams/{name}/dashboards/{dashboardId}
PUT /api/streams/{name}/_ingest
PUT /api/streams/{name}/_group
PUT /api/streams/{name}
PUT /api/logstash/pipeline/{id}
POST /api/upgrade_assistant/reindex/{index}/cancel
POST /api/upgrade_assistant/reindex/{index}
POST /api/upgrade_assistant/reindex/batch
POST /api/streams/{name}/dashboards/_bulk
POST /api/streams/{name}/content/import
POST /api/streams/{name}/content/export
POST /api/streams/{name}/_fork
POST /api/streams/_resync
POST /api/streams/_enable
POST /api/streams/_disable
POST /api/short_url
POST /api/security/session/_invalidate
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}/kibana_assets
POST /api/alerting/rule/{id}/snooze_schedule
GET /s/{spaceId}/internal/observability/slos/_definitions