List entity resolution rules Generally available; added in 9.5.0

GET /api/security/entity_store/resolution/rules
Api key auth Basic auth

Spaces method and path for this operation:

get /s/{space_id}/api/security/entity_store/resolution/rules

Refer to Spaces for more information.

List managed entity resolution rules and their effective enabled state for this space.

[Required authorization] Route required privileges: securitySolution AND securitySolution-entity-analytics.

Responses

  • 200 application/json

    Entity resolution rules.

GET /api/security/entity_store/resolution/rules 
curl \
 --request GET 'https://localhost:5601/api/security/entity_store/resolution/rules' \
 --header "Authorization: $API_KEY"
Response examples (200)
Lists the managed resolution rules and their enabled state in the current space. 
{
  "rules": [
    {
      "enabled": false,
      "id": "related_user_alias_resolution",
      "kind": "related_user_alias_resolution",
      "managed": true
    },
    {
      "enabled": true,
      "id": "email_exact_match",
      "kind": "email_exact_match",
      "managed": true
    }
  ]
}