API structure has changed
This documentation update aligns with a release. Checkout out the latest release notes
340 structure changes including:
23 Additions
317 Modifications
Modified
317
Breaking
POST /api/fleet/agents/bulk_request_diagnostics
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/endpoint_list
- Operation is no longer beta
POST /api/endpoint/protection_updates_note/{package_policy_id}
- Operation is no longer beta
POST /api/endpoint/action/upload
- Operation is no longer beta
POST /api/endpoint/action/unisolate
- Operation is no longer beta
POST /api/endpoint/action/suspend_process
- Operation is no longer beta
POST /api/endpoint/action/scan
- Operation is no longer beta
POST /api/endpoint/action/runscript
- Operation is no longer beta
POST /api/endpoint/action/running_procs
- Operation is no longer beta
POST /api/endpoint/action/kill_process
- Operation is no longer beta
POST /api/endpoint/action/isolate
- Operation is no longer beta
POST /api/endpoint/action/get_file
- Operation is no longer beta
POST /api/endpoint/action/execute
- Operation is no longer beta
POST /api/detection_engine/signals/tags
- Operation is no longer beta
POST /api/detection_engine/signals/status
- Operation is no longer beta
POST /api/detection_engine/signals/search
- Operation is no longer beta
POST /api/detection_engine/signals/assignees
- Operation is no longer beta
POST /api/detection_engine/rules/{id}/exceptions
- Operation is no longer beta
POST /api/detection_engine/rules/preview
- Operation is no longer beta
POST /api/detection_engine/rules/_import
- Operation is no longer beta
POST /api/detection_engine/rules/_export
- Operation is no longer beta
POST /api/detection_engine/rules/_bulk_action
- Operation is no longer beta
POST /api/fleet/agents/bulk_reassign
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/agents/actions/{actionId}/cancel
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/agents
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/agent_policies/{agentPolicyId}/copy
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/agent_policies/outputs
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/agent_policies/delete
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/agent_policies/_bulk_get
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/agent_policies
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/agent_download_sources
- Operation is no longer beta
- Body
-
application/json content type Modified
- secrets, ssl properties Added
- Response
-
200 response Modified
-
application/json content type Modified
-
item property Modified
- secrets, ssl properties Added
-
item property Modified
-
application/json content type Modified
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/exceptions/shared
- Operation is no longer beta
POST /api/exception_lists/items
- Operation is no longer beta
POST /api/exception_lists/_import
- Operation is no longer beta
POST /api/exception_lists/_export
- Operation is no longer beta
POST /api/exception_lists/_duplicate
- Operation is no longer beta
POST /api/exception_lists
- Operation is no longer beta
POST /api/entity_store/engines/{entityType}/stop
- Operation is no longer beta
POST /api/entity_store/engines/{entityType}/start
- Operation is no longer beta
POST /api/entity_store/engines/{entityType}/init
- Operation is no longer beta
- Response
- 400 response Added
POST /api/entity_store/engines/apply_dataview_indices
- Operation is no longer beta
POST /api/entity_store/enable
- Operation is no longer beta
- Response
- 400 response Added
POST /api/endpoint_list/items
- Operation is no longer beta
POST /api/alerting/rule/{id}/_enable
- Operation is no longer beta
POST /api/alerting/rule/{id}/_disable
- Operation is no longer beta
POST /api/alerting/rule/{id}
- Operation is no longer beta
POST /api/actions/connector/{id}/_execute
- Operation is no longer beta
POST /api/actions/connector/{id}
- Operation is no longer beta
PATCH /api/timeline/_favorite
- Operation is no longer beta
PATCH /api/timeline
- Operation is no longer beta
- Body
-
application/json content type Modified
-
timeline property Modified
-
eventType property Modified
- Property is now deprecated
-
eventType property Modified
-
timeline property Modified
- Response
-
200 response Modified
-
application/json content type Modified
-
eventType property Modified
- Property is now deprecated
-
eventType property Modified
-
application/json content type Modified
PATCH /api/risk_score/engine/saved_object/configure
- Operation is no longer beta
PATCH /api/pinned_event
- Operation is no longer beta
PATCH /api/note
- Operation is no longer beta
- Body
-
application/json content type Modified
-
eventDataView, eventIngested, eventTimestamp, overrideOwner properties Removed
-
Removing a resource is always breaking unless it was deprecated before Breaking
-
Removing a resource is always breaking unless it was deprecated before
-
eventDataView, eventIngested, eventTimestamp, overrideOwner properties Removed
PATCH /api/lists/items
- Operation is no longer beta
PATCH /api/lists
- Operation is no longer beta
PATCH /api/detection_engine/rules
- Operation is no longer beta
GET /s/{spaceId}/api/observability/slos/{sloId}
- Operation is no longer beta
- Response
-
200 response Modified
-
application/json content type Modified
-
indicator property Modified
- SLOs_indicator_properties_custom_metric alternative Modified
-
indicator property Modified
-
application/json content type Modified
GET /s/{spaceId}/api/observability/slos
- Operation is no longer beta
- Response
-
200 response Modified
-
application/json content type Modified
-
results property Modified
- indicator property Modified
- searchAfter, size properties Added
-
results property Modified
-
application/json content type Modified
- Query
- size, searchAfter query parameters Added
GET /api/timelines
- Operation is no longer beta
- Response
-
200 response Modified
-
application/json content type Modified
-
timeline property Modified
-
eventType property Modified
- Property is now deprecated
-
eventType property Modified
-
timeline property Modified
-
application/json content type Modified
GET /api/timeline/resolve
- Operation is no longer beta
- Response
-
200 response Modified
-
application/json content type Modified
-
timeline property Modified
-
eventType property Modified
- Property is now deprecated
-
eventType property Modified
-
timeline property Modified
-
application/json content type Modified
GET /api/timeline/_draft
- Operation is no longer beta
- Response
-
200 response Modified
-
application/json content type Modified
-
eventType property Modified
- Property is now deprecated
-
eventType property Modified
-
application/json content type Modified
GET /api/timeline/_copy
- Operation is no longer beta
- Body
-
application/json content type Modified
-
timeline property Modified
-
eventType property Modified
- Property is now deprecated
-
eventType property Modified
-
timeline property Modified
- Response
-
200 response Modified
-
application/json content type Modified
-
eventType property Modified
- Property is now deprecated
-
eventType property Modified
-
application/json content type Modified
GET /api/timeline
- Operation is no longer beta
- Response
-
200 response Modified
-
application/json content type Modified
-
eventType property Modified
- Property is now deprecated
-
eventType property Modified
-
application/json content type Modified
GET /api/status
- Operation is no longer beta
POST /api/detection_engine/rules
- Operation is no longer beta
POST /api/data_views/swap_references/_preview
- Operation is no longer beta
POST /api/data_views/swap_references
- Operation is no longer beta
POST /api/data_views/default
- Operation is no longer beta
POST /api/data_views/data_view/{viewId}/runtime_field/{fieldName}
- Operation is no longer beta
POST /api/data_views/data_view/{viewId}/runtime_field
- Operation is no longer beta
POST /api/data_views/data_view/{viewId}/fields
- Operation is no longer beta
POST /api/data_views/data_view/{viewId}
- Operation is no longer beta
POST /api/data_views/data_view
- Operation is no longer beta
POST /api/asset_criticality/bulk
- Operation is no longer beta
POST /api/asset_criticality
- Operation is no longer beta
POST /api/apm/sourcemaps
- Operation is no longer beta
POST /api/apm/settings/agent-configuration/search
- Operation is no longer beta
POST /api/apm/services/{serviceName}/annotation
- Operation is no longer beta
POST /api/apm/fleet/apm_server_schema
- Operation is no longer beta
POST /api/apm/agent_keys
- Operation is no longer beta
POST /api/alerting/rule/{rule_id}/alert/{alert_id}/_unmute
- Operation is no longer beta
POST /api/alerting/rule/{rule_id}/alert/{alert_id}/_mute
- Operation is no longer beta
POST /api/alerting/rule/{id}/_update_api_key
- Operation is no longer beta
POST /api/alerting/rule/{id}/_unmute_all
- Operation is no longer beta
POST /api/alerting/rule/{id}/_mute_all
- Operation is no longer beta
PUT /s/{spaceId}/api/observability/slos/{sloId}
- Operation is no longer beta
- Body
-
application/json content type Modified
-
indicator property Modified
-
SLOs_indicator_properties_custom_metric alternative Modified
- params property Modified
-
SLOs_indicator_properties_custom_metric alternative Modified
-
indicator property Modified
- Response
-
200 response Modified
-
application/json content type Modified
-
indicator property Modified
- SLOs_indicator_properties_custom_metric alternative Modified
-
indicator property Modified
-
application/json content type Modified
PUT /api/data_views/data_view/{viewId}/runtime_field
- Operation is no longer beta
PUT /api/apm/settings/agent-configuration
- Operation is no longer beta
PUT /api/alerting/rule/{id}
- Operation is no longer beta
PUT /api/actions/connector/{id}
- Operation is no longer beta
POST /s/{spaceId}/api/observability/slos/{sloId}/enable
- Operation is no longer beta
POST /s/{spaceId}/api/observability/slos/{sloId}/disable
- Operation is no longer beta
POST /s/{spaceId}/api/observability/slos/{sloId}/_reset
- Operation is no longer beta
- Response
-
200 response Modified
-
application/json content type Modified
-
indicator property Modified
- SLOs_indicator_properties_custom_metric alternative Modified
-
indicator property Modified
-
application/json content type Modified
POST /s/{spaceId}/api/observability/slos/_delete_instances
- Operation is no longer beta
POST /s/{spaceId}/api/observability/slos
- Operation is no longer beta
- Body
-
application/json content type Modified
-
indicator property Modified
-
SLOs_indicator_properties_custom_metric alternative Modified
- params property Modified
-
SLOs_indicator_properties_custom_metric alternative Modified
-
indicator property Modified
POST /api/timeline/_prepackaged
- Operation is no longer beta
- Body
-
application/json content type Modified
-
prepackagedTimelines property Modified
-
eventType property Modified
- Property is now deprecated
-
eventType property Modified
-
timelinesToInstall property Modified
-
eventType property Modified
- Property is now deprecated
-
eventType property Modified
-
timelinesToUpdate property Modified
-
eventType property Modified
- Property is now deprecated
-
eventType property Modified
-
prepackagedTimelines property Modified
POST /api/timeline/_import
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
-
id property Removed
-
Removing a resource is always breaking unless it was deprecated before Breaking
-
Removing a resource is always breaking unless it was deprecated before
-
id property Removed
-
application/json content type Modified
-
404 response Modified
-
application/json content type Modified
-
id property Removed
-
Removing a resource is always breaking unless it was deprecated before Breaking
-
Removing a resource is always breaking unless it was deprecated before
- body property Added
-
id property Removed
-
application/json content type Modified
-
409 response Modified
-
application/json content type Modified
-
id property Removed
-
Removing a resource is always breaking unless it was deprecated before Breaking
-
Removing a resource is always breaking unless it was deprecated before
-
id property Removed
-
application/json content type Modified
POST /api/timeline/_export
- Operation is no longer beta
POST /api/timeline/_draft
- Operation is no longer beta
- Response
-
200 response Modified
-
application/json content type Modified
-
eventType property Modified
- Property is now deprecated
-
eventType property Modified
-
application/json content type Modified
POST /api/timeline
- Operation is no longer beta
- Body
-
application/json content type Modified
-
timeline property Modified
-
eventType property Modified
- Property is now deprecated
-
eventType property Modified
-
timeline property Modified
- Response
-
200 response Modified
-
application/json content type Modified
-
eventType property Modified
- Property is now deprecated
-
eventType property Modified
-
application/json content type Modified
POST /api/spaces/space
- Operation is no longer beta
POST /api/security_ai_assistant/prompts/_bulk_action
- Operation is no longer beta
POST /api/security_ai_assistant/knowledge_base/{resource}
- Operation is no longer beta
POST /api/security_ai_assistant/knowledge_base/entries/_bulk_action
- Operation is no longer beta
POST /api/security_ai_assistant/knowledge_base/entries
- Operation is no longer beta
POST /api/security_ai_assistant/current_user/conversations
- Operation is no longer beta
POST /api/security_ai_assistant/chat/complete
- Operation is no longer beta
PUT /api/spaces/space/{id}
- Operation is no longer beta
PUT /api/security_ai_assistant/knowledge_base/entries/{id}
- Operation is no longer beta
PUT /api/security_ai_assistant/current_user/conversations/{id}
- Operation is no longer beta
PUT /api/security/role/{name}
- Operation is no longer beta
PUT /api/osquery/saved_queries/{id}
- Operation is no longer beta
PUT /api/osquery/packs/{id}
- Operation is no longer beta
PUT /api/lists/items
- Operation is no longer beta
PUT /api/lists
- Operation is no longer beta
PUT /api/fleet/settings
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
PUT /api/fleet/proxies/{itemId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
PUT /api/fleet/package_policies/{packagePolicyId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
-
403 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
PUT /api/fleet/outputs/{outputId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
PUT /api/fleet/fleet_server_hosts/{itemId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
PUT /api/fleet/epm/packages/{pkgName}/{pkgVersion}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
PUT /api/fleet/agents/{agentId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
PUT /api/fleet/agent_policies/{agentPolicyId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
PUT /api/fleet/agent_download_sources/{sourceId}
- Operation is no longer beta
- Body
-
application/json content type Modified
- secrets, ssl properties Added
- Response
-
200 response Modified
-
application/json content type Modified
-
item property Modified
- secrets, ssl properties Added
-
item property Modified
-
application/json content type Modified
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
PUT /api/exception_lists/items
- Operation is no longer beta
PUT /api/exception_lists
- Operation is no longer beta
PUT /api/endpoint_list/items
- Operation is no longer beta
PUT /api/detection_engine/rules
- Operation is no longer beta
POST /api/fleet/outputs
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/message_signing_service/rotate_key_pair
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
-
500 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/logstash_api_keys
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/health_check
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
-
404 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/fleet_server_hosts
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}/transforms/authorize
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/epm/packages/_bulk
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/epm/packages
- Operation is no longer beta
- Response
-
400 response Modified
-
application/gzip; application/zip content type Modified
- errorType property Added
-
application/gzip; application/zip content type Modified
POST /api/fleet/epm/custom_integrations
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/epm/bulk_assets
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/enrollment_api_keys
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/agents/{agentId}/upgrade
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/agents/{agentId}/unenroll
- Operation is no longer beta
POST /api/fleet/agents/{agentId}/request_diagnostics
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/agents/{agentId}/reassign
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/agents/{agentId}/actions
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/agents/setup
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/agents/bulk_upgrade
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/agents/bulk_update_agent_tags
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/agents/bulk_unenroll
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/security_ai_assistant/anonymization_fields/_bulk_action
- Operation is no longer beta
POST /api/security/roles
- Operation is no longer beta
POST /api/saved_objects/_import
- Operation is no longer beta
POST /api/saved_objects/_export
- Operation is no longer beta
POST /api/risk_score/engine/schedule_now
- Operation is no longer beta
POST /api/osquery/saved_queries
- Operation is no longer beta
POST /api/osquery/packs
- Operation is no longer beta
POST /api/osquery/live_queries
- Operation is no longer beta
POST /api/lists/items/_import
- Operation is no longer beta
POST /api/lists/items/_export
- Operation is no longer beta
POST /api/lists/items
- Operation is no longer beta
POST /api/lists/index
- Operation is no longer beta
POST /api/lists
- Operation is no longer beta
POST /api/fleet/setup
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/service_tokens
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/proxies
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/package_policies/upgrade/dryrun
- Operation is no longer beta
- Response
-
200 response Modified
-
application/json content type Modified
-
agent_diff property Modified
- array property Modified
-
agent_diff property Modified
-
application/json content type Modified
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/package_policies/upgrade
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/package_policies/delete
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/package_policies/_bulk_get
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
POST /api/fleet/package_policies
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
-
409 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/spaces/space/{id}
- Operation is no longer beta
GET /api/detection_engine/tags
- Operation is no longer beta
GET /api/detection_engine/rules/_find
- Operation is no longer beta
GET /api/detection_engine/rules
- Operation is no longer beta
GET /api/detection_engine/privileges
- Operation is no longer beta
GET /api/data_views/default
- Operation is no longer beta
GET /api/data_views/data_view/{viewId}/runtime_field/{fieldName}
- Operation is no longer beta
GET /api/data_views/data_view/{viewId}
- Operation is no longer beta
GET /api/data_views
- Operation is no longer beta
GET /api/asset_criticality/list
- Operation is no longer beta
GET /api/asset_criticality
- Operation is no longer beta
GET /api/apm/sourcemaps
- Operation is no longer beta
GET /api/apm/settings/agent-configuration/view
- Operation is no longer beta
GET /api/apm/settings/agent-configuration/environments
- Operation is no longer beta
GET /api/apm/settings/agent-configuration/agent_name
- Operation is no longer beta
GET /api/apm/settings/agent-configuration
- Operation is no longer beta
GET /api/apm/services/{serviceName}/annotation/search
- Operation is no longer beta
GET /api/alerting/rules/_find
- Operation is no longer beta
GET /api/alerting/rule/{id}
- Operation is no longer beta
GET /api/exception_lists/_find
- Operation is no longer beta
GET /api/exception_lists
- Operation is no longer beta
GET /api/entity_store/status
- Operation is no longer beta
GET /api/entity_store/entities/list
- Operation is no longer beta
GET /api/entity_store/engines/{entityType}
- Operation is no longer beta
GET /api/entity_store/engines
- Operation is no longer beta
GET /api/endpoint_list/items/_find
- Operation is no longer beta
GET /api/endpoint_list/items
- Operation is no longer beta
GET /api/endpoint/protection_updates_note/{package_policy_id}
- Operation is no longer beta
GET /api/endpoint/policy_response
- Operation is no longer beta
GET /api/endpoint/metadata/{id}
- Operation is no longer beta
GET /api/endpoint/metadata
- Operation is no longer beta
GET /api/endpoint/action_status
- Operation is no longer beta
GET /api/endpoint/action/{action_id}/file/{file_id}/download
- Operation is no longer beta
GET /api/endpoint/action/{action_id}/file/{file_id}
- Operation is no longer beta
GET /api/endpoint/action/{action_id}
- Operation is no longer beta
GET /api/endpoint/action/state
- Operation is no longer beta
GET /api/endpoint/action
- Operation is no longer beta
GET /api/actions/connectors
- Operation is no longer beta
DELETE /api/fleet/fleet_server_hosts/{itemId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
DELETE /api/fleet/epm/packages/{pkgName}/{pkgVersion}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
DELETE /api/fleet/enrollment_api_keys/{keyId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
DELETE /api/fleet/agents/{agentId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
DELETE /api/fleet/agents/files/{fileId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
DELETE /api/fleet/agent_download_sources/{sourceId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
DELETE /api/exception_lists/items
- Operation is no longer beta
DELETE /api/exception_lists
- Operation is no longer beta
DELETE /api/entity_store/engines/{entityType}
- Operation is no longer beta
DELETE /api/endpoint_list/items
- Operation is no longer beta
DELETE /api/detection_engine/rules
- Operation is no longer beta
DELETE /api/data_views/data_view/{viewId}/runtime_field/{fieldName}
- Operation is no longer beta
DELETE /api/data_views/data_view/{viewId}
- Operation is no longer beta
DELETE /api/asset_criticality
- Operation is no longer beta
DELETE /api/apm/sourcemaps/{id}
- Operation is no longer beta
DELETE /api/apm/settings/agent-configuration
- Operation is no longer beta
DELETE /api/alerting/rule/{id}
- Operation is no longer beta
DELETE /api/actions/connector/{id}
- Operation is no longer beta
GET /api/actions/connector_types
- Operation is no longer beta
GET /api/actions/connector/{id}
- Operation is no longer beta
DELETE /s/{spaceId}/api/observability/slos/{sloId}
- Operation is no longer beta
DELETE /api/timeline
- Operation is no longer beta
DELETE /api/spaces/space/{id}
- Operation is no longer beta
DELETE /api/security_ai_assistant/knowledge_base/entries/{id}
- Operation is no longer beta
DELETE /api/security_ai_assistant/current_user/conversations/{id}
- Operation is no longer beta
DELETE /api/security/role/{name}
- Operation is no longer beta
DELETE /api/risk_score/engine/dangerously_delete_data
- Operation is no longer beta
DELETE /api/osquery/saved_queries/{id}
- Operation is no longer beta
DELETE /api/osquery/packs/{id}
- Operation is no longer beta
DELETE /api/note
- Operation is no longer beta
DELETE /api/lists/items
- Operation is no longer beta
DELETE /api/lists/index
- Operation is no longer beta
DELETE /api/lists
- Operation is no longer beta
DELETE /api/fleet/proxies/{itemId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
DELETE /api/fleet/package_policies/{packagePolicyId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
DELETE /api/fleet/outputs/{outputId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
-
404 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/ml/saved_objects/sync
- Operation is no longer beta
GET /api/lists/privileges
- Operation is no longer beta
GET /api/lists/items/_find
- Operation is no longer beta
GET /api/lists/items
- Operation is no longer beta
GET /api/lists/index
- Operation is no longer beta
GET /api/lists/_find
- Operation is no longer beta
GET /api/lists
- Operation is no longer beta
GET /api/fleet/uninstall_tokens/{uninstallTokenId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/uninstall_tokens
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/settings
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/proxies/{itemId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/proxies
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/package_policies/{packagePolicyId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/package_policies
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/outputs/{outputId}/health
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/outputs/{outputId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/outputs
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/kubernetes/download
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
-
404 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/spaces/space
- Operation is no longer beta
GET /api/security_ai_assistant/prompts/_find
- Operation is no longer beta
GET /api/security_ai_assistant/knowledge_base/{resource}
- Operation is no longer beta
GET /api/security_ai_assistant/knowledge_base/entries/{id}
- Operation is no longer beta
GET /api/security_ai_assistant/knowledge_base/entries/_find
- Operation is no longer beta
GET /api/security_ai_assistant/current_user/conversations/{id}
- Operation is no longer beta
GET /api/security_ai_assistant/current_user/conversations/_find
- Operation is no longer beta
GET /api/security_ai_assistant/anonymization_fields/_find
- Operation is no longer beta
GET /api/security/role/{name}
- Operation is no longer beta
GET /api/security/role
- Operation is no longer beta
GET /api/osquery/saved_queries/{id}
- Operation is no longer beta
GET /api/osquery/saved_queries
- Operation is no longer beta
GET /api/osquery/packs/{id}
- Operation is no longer beta
GET /api/osquery/packs
- Operation is no longer beta
GET /api/osquery/live_queries/{id}/results/{actionId}
- Operation is no longer beta
GET /api/osquery/live_queries/{id}
- Operation is no longer beta
GET /api/osquery/live_queries
- Operation is no longer beta
GET /api/note
- Operation is no longer beta
GET /api/fleet/kubernetes
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/agents/tags
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/agents/setup
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/agents/files/{fileId}/{fileName}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/agents/available_versions
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/agents/action_status
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/agents
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/agent_status/data
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/agent_status
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/agent_policies/{agentPolicyId}/outputs
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/agent_policies/{agentPolicyId}/full
- Operation is no longer beta
- Response
-
200 response Modified
-
application/json content type Modified
-
item property Modified
- object-2 alternative Modified
-
item property Modified
-
application/json content type Modified
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/agent_policies/{agentPolicyId}/download
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
-
404 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/agent_policies/{agentPolicyId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/agent_policies
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/agent_download_sources/{sourceId}
- Operation is no longer beta
- Response
-
200 response Modified
-
application/json content type Modified
-
item property Modified
- secrets, ssl properties Added
-
item property Modified
-
application/json content type Modified
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/agent_download_sources
- Operation is no longer beta
- Response
-
200 response Modified
-
application/json content type Modified
-
items property Modified
- secrets, ssl properties Added
-
items property Modified
-
application/json content type Modified
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/exception_lists/summary
- Operation is no longer beta
GET /api/exception_lists/items/_find
- Operation is no longer beta
GET /api/exception_lists/items
- Operation is no longer beta
GET /api/fleet/fleet_server_hosts/{itemId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/fleet_server_hosts
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/epm/verification_key_id
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/epm/templates/{pkgName}/{pkgVersion}/inputs
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}/{filePath}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/epm/packages/{pkgName}/stats
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/epm/packages/limited
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/epm/packages/installed
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/epm/packages
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/epm/data_streams
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/epm/categories
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/enrollment_api_keys/{keyId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/enrollment_api_keys
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/data_streams
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/check-permissions
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/agents/{agentId}/uploads
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
GET /api/fleet/agents/{agentId}
- Operation is no longer beta
- Response
-
400 response Modified
-
application/json content type Modified
- errorType property Added
-
application/json content type Modified
Added
23
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}/kibana_assets
POST /api/alerting/rule/{id}/snooze_schedule
GET /s/{spaceId}/internal/observability/slos/_definitions
GET /api/streams/{name}/dashboards
GET /api/streams/{name}/_ingest
GET /api/streams/{name}/_group
GET /api/streams/{name}
GET /api/streams
DELETE /api/streams/{name}/dashboards/{dashboardId}
DELETE /api/streams/{name}
DELETE /api/fleet/epm/packages/{pkgName}/{pkgVersion}/kibana_assets
DELETE /api/alerting/rule/{ruleId}/snooze_schedule/{scheduleId}
POST /api/streams/_disable
POST /api/streams/_enable
POST /api/streams/_resync
POST /api/streams/{name}/_fork
POST /api/streams/{name}/content/export
POST /api/streams/{name}/content/import
POST /api/streams/{name}/dashboards/_bulk
PUT /api/streams/{name}
PUT /api/streams/{name}/_group
PUT /api/streams/{name}/_ingest
PUT /api/streams/{name}/dashboards/{dashboardId}