Upsert multiple monitored users via CSV upload

POST /api/entity_analytics/monitoring/users/_csv
Api key auth

Spaces method and path for this operation:

post /s/{space_id}/api/entity_analytics/monitoring/users/_csv

Refer to Spaces for more information.

Bulk upserts privileged users by uploading a CSV file. Returns per-row errors and aggregate upload statistics.

multipart/form-data

Body

  • file string(binary) Required

    The CSV file to upload.

Responses

  • 200 application/json

    Bulk upload successful

    Hide response attributes Show response attributes object
    • errors array[object] Required
      Hide errors attributes Show errors attributes object
      • index integer | null Required
      • message string Required
      • username string | null Required
    • stats object Required
      Hide stats attributes Show stats attributes object
      • failedOperations integer Required
      • successfulOperations integer Required
      • totalOperations integer Required
      • uploaded integer Required
  • 413

    File too large

POST /api/entity_analytics/monitoring/users/_csv 
curl \
 --request POST 'https://<KIBANA_URL>/api/entity_analytics/monitoring/users/_csv' \
 --header "Authorization: $API_KEY" \
 --header "Content-Type: multipart/form-data" \
 --form "file=username,is_privileged
john.doe,true
jane.smith,true
"
Request example 
{"file" => "username,is_privileged\njohn.doe,true\njane.smith,true\n"}
Response examples (200) 
{
  "errors": [
    {
      "index": 1,
      "message": "Invalid monitored field",
      "username": "john.doe"
    }
  ],
  "stats": {
    "failedOperations": 1,
    "successfulOperations": 1,
    "totalOperations": 2,
    "uploaded": 2
  }
}