v53

latestOpenAPI 3.0.3raw.githubusercontent.com2026-08-076771,7565.2 MB
Security Detections API

Retrieve the status of detection alert migrations

Spaces method and path for this operation:

<div><span class="operation-verb get">get</span>&nbsp;<span class="operation-path">/s/{space_id}/api/detection_engine/signals/migration_status</span></div>

Refer to Spaces for more information.

DEPRECATED. This endpoint was used for historical .siem-signals-* index migration workflows. Do not use for new automations; there is no supported replacement in this public API. WARNING: Prefer upgrading through supported Elastic stack upgrades rather than ad-hoc index migrations.

Retrieves indices that contain detection alerts of a particular age, along with migration information for each of those indices.

get/api/detection_engine/signals/migration_status

Query parameters

fromstring date-math required

Time from which data is analyzed. For example, now-4200s means the rule analyzes data from 70 minutes before its start time. Defaults to now-6m (analyzes data from 6 minutes before the start time).

Example:now-30d

Maximum age of qualifying detection alerts

Response

Successful response