stack kb security-entity-store put-security-entity-store-entities-entitytype cli command

elastic stack kb security-entity-store put-security-entity-store-entities-entitytype \
  --entity-type <entity-type> \
  [options]
		

Update an entity

Behaviour flags:

--dry-run — validate all inputs and exit without performing any action

--entity-type string required

The entity type to update.

--force

When true, allows updating protected fields.

--@timestamp string

The time the entity record was last updated.

--asset string

--entity string

--event string

--labels string

--tags string[]

Repeatable: pass --tags multiple times to supply more than one value

--user string

Elastic Common Schema (ECS) user fields collected on the entity.

--host string

Elastic Common Schema (ECS) host fields collected on the entity.

--service string

Elastic Common Schema (ECS) service fields collected on the entity.

--cloud string

Elastic Common Schema (ECS) cloud fields for cloud-hosted entities.

--orchestrator string

Elastic Common Schema (ECS) orchestrator fields for container-orchestrated entities.

--input-file string

path to a JSON file to use as command input

--dry-run

validate all inputs and exit without performing any action (preview changes without applying them)

--no-validate

skip input validation and send the request as-is

--output-fields string

comma-separated list of fields to include in output (dot-notation supported)

--output-template string

Mustache-like template for custom text output (e.g. "{{id}}: {{name}}")

--json

output as JSON