v53

latestOpenAPI 3.0.3raw.githubusercontent.com2026-08-076771,7565.2 MB
Security entity store

List entities

Spaces method and path for this operation:

<div><span class="operation-verb get">get</span>&nbsp;<span class="operation-path">/s/{space_id}/api/security/entity_store/entities</span></div>

Refer to Spaces for more information.

List entity records from the Entity Store with paging, sorting, and filtering. Supports two modes: page-based pagination (page/per_page) and cursor-based pagination (searchAfter). The two modes cannot be combined.<br/><br/>[Required authorization] Route required privileges: securitySolution.

get/api/security/entity_store/entities

Query parameters

filterstring

A Kibana Query Language (KQL) filter for the search-after mode.

sizeinteger

Number of entities to return in search-after mode.

searchAfterstring

JSON-encoded search_after value for cursor-based pagination.

sourcestring[]

Fields to include in the response source.

fieldsstring[]

Fields to include in the response.

sort_fieldstring

Field to sort results by in page mode.

sort_order'asc' | 'desc'

Sort order in page mode.

pageinteger

Page number to return (1-indexed) in page mode.

per_pageinteger

Number of entities per page in page mode.

filterQuerystring

An Elasticsearch query string to filter entities in page mode.

entity_typesstring[]

Entity types to include in the results.

Response

Indicates a successful response.