Sign in

v53

latestOpenAPI 3.0.3raw.githubusercontent.com2026-08-076771,7565.2 MB
Security Entity Analytics API

Upsert an asset criticality record

Spaces method and path for this operation:

<div><span class="operation-verb post">post</span>&nbsp;<span class="operation-path">/s/{space_id}/api/asset_criticality</span></div>

Refer to Spaces for more information.

Deprecated in 9.4.0. Use the Entity Store APIs to assign asset criticality to an entity.

Create or update an asset criticality record for a specific entity.

If a record already exists for the specified entity, that record is overwritten with the specified value. If a record doesn't exist for the specified entity, a new record is created.

post/api/asset_criticality

Request body

id_field'host.name' | 'user.name' | 'service.name' | 'entity.id' required
id_valuestring required

The ID value of the asset.

criticality_level'low_impact' | 'medium_impact' | 'high_impact' | 'extreme_impact' required

The criticality level of the asset.

refresh'wait_for'

If 'wait_for' the request will wait for the index refresh.

Example request

{
  "criticality_level": "high_impact",
  "id_field": "host.name",
  "id_value": "my_host"
}

Response

Successful response

id_field'host.name' | 'user.name' | 'service.name' | 'entity.id' required
id_valuestring required

The ID value of the asset.

criticality_level'low_impact' | 'medium_impact' | 'high_impact' | 'extreme_impact' required

The criticality level of the asset.

@timestampstring date-time required

The time the record was created or updated.

Example response

{
  "@timestamp": "2024-08-02T11:15:34.290Z",
  "asset": {
    "criticality": "high_impact"
  },
  "criticality_level": "high_impact",
  "host": {
    "asset": {
      "criticality": "high_impact"
    },
    "name": "my_host"
  },
  "id_field": "host.name",
  "id_value": "my_host"
}