v53

latestOpenAPI 3.0.3raw.githubusercontent.com2026-08-076771,7565.2 MB
Security entity store

Link entities

Spaces method and path for this operation:

<div><span class="operation-verb post">post</span>&nbsp;<span class="operation-path">/s/{space_id}/api/security/entity_store/resolution/link</span></div>

Refer to Spaces for more information.

Link one or more entities to a target entity, creating a resolution group. Changes become visible on subsequent reads after the next index refresh (typically <1s).<br/><br/>[Required authorization] Route required privileges: securitySolution AND securitySolution-entity-analytics.

post/api/security/entity_store/resolution/link

Headers

kbn-xsrfstring required
Example:true

A required header to protect against CSRF attacks

Request body

entity_idsstring[] required

Entity identifiers to link to the target entity. Minimum 1, maximum 1000.

target_idstring required

The entity identifier to resolve the linked entities to.

Response

Indicates a successful response.