Pin an event to an existing Timelineedit

The Kibana Console supports only Elasticsearch APIs. You cannot interact with the Kibana APIs with the Console and must use curl or another HTTP tool instead. For more information, refer to Console.

Request URLedit

PATCH <kibana host>:<port>/api/pinned_event

Request bodyedit

Name Type Description Required

eventId

String

Each document has an _id to uniquely identify it

Yes

pinnedEventId

String

A pinned event savedObjectId

No

timelineId

String

The savedObjectId of an existing Timeline the pinned event is linked to

Yes

Example requestsedit

Example 1

Pin an event to an existing Timeline:

PATCH api/pinned_event
{
  "eventId":"LRuPFXkBVs8glbN0jXtI",
  "timelineId":"b2c103b0-a79d-11eb-9dce-0f3114099868"
}

Example 2

Unpin an event:

PATCH api/pinned_event
{
  "eventId":"LRuPFXkBVs8glbN0jXtI",
  "pinnedEventId":"9bc11e40-b312-11eb-8078-5b983613cc0f",
  "timelineId":"b2c103b0-a79d-11eb-9dce-0f3114099868"
}