---
title: "Retrieve the status of prebuilt detection rules and Timelines"
method: GET
path: "/api/detection_engine/rules/prepackaged/_status"
tags: ["Security Detections API"]
---

# Retrieve the status of prebuilt detection rules and Timelines

`GET /api/detection_engine/rules/prepackaged/_status`

**Spaces method and path for this operation:**

<div><span class="operation-verb get">get</span>&nbsp;<span class="operation-path">/s/{space_id}/api/detection_engine/rules/prepackaged/_status</span></div>

Refer to [Spaces](https://www.elastic.co/docs/deploy-manage/manage-spaces) for more information.

Retrieve the status of all Elastic prebuilt detection rules and Timelines. 

This endpoint provides detailed information about the number of custom rules, installed prebuilt rules, available prebuilt rules that are not installed, outdated prebuilt rules, installed prebuilt timelines, available prebuilt timelines that are not installed, and outdated prebuilt timelines.

## Response `200`

Indicates a successful call

- object
  - `rules_custom_installed` integer, required — The total number of custom rules
  - `rules_installed` integer, required — The total number of installed prebuilt rules
  - `rules_not_installed` integer, required — The total number of available prebuilt rules that are not installed
  - `rules_not_updated` integer, required — The total number of outdated prebuilt rules
  - `timelines_installed` integer, required — The total number of installed prebuilt timelines
  - `timelines_not_installed` integer, required — The total number of available prebuilt timelines that are not installed
  - `timelines_not_updated` integer, required — The total number of outdated prebuilt timelines

---

[API](https://skmtc.net/elastic/apis/kibana-apis.md) · [All operations](https://skmtc.net/elastic/apis/kibana-apis/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/elastic/kibana-apis/versions/531c9e2a7d23/schema)