/
EL
elastic
/
Kibana APIs
Search skmtc…
⌘K
Docs
Sign in
Sign in
APIs
Generators
Stacks
Projects
Docs
History
Schema
Sources
Checked 1h ago · Updated 6h ago
View markdown
elastic
Kibana APIs
get
Get a watchlist by ID
OpenAPI 3.0.3
raw.githubusercontent.com
2026-08-17
730
1,812
5.6 MB
e9badbb5da99
agent builder
40
alerting
23
alerting-v2
52
APM agent configuration
7
APM agent keys
1
APM annotations
2
APM server schema
1
APM sourcemaps
3
cases
29
connectors
9
Dashboards
5
Data streams
2
data views
15
Elastic Agent actions
16
Elastic Agent binary download sources
5
Elastic Agent policies
14
Elastic Agent status
1
Elastic Agents
18
Elastic Package Manager (EPM)
36
Fleet agentless policies
7
Fleet cloud connectors
6
Fleet enrollment API keys
5
Fleet internals
7
Fleet managed integrations
7
Fleet outputs
7
Fleet package policies
9
Fleet proxies
5
Fleet remote synced integrations
2
Fleet Server hosts
5
Fleet service tokens
1
Fleet uninstall tokens
3
Links
5
logstash
4
maintenance-window
7
Markdowns
5
Message Signing Service
1
ml
3
observability_ai_assistant
1
roles
5
saved objects
16
Security AI Assistant API
21
Security Attack discovery API
16
Security Detections API
29
Security Endpoint Exceptions API
6
Security Endpoint Management API
29
Security Entity Analytics API
29
get
Get an asset criticality record
post
Upsert an asset criticality record
delete
Delete an asset criticality record
post
Bulk upsert asset criticality records
get
List asset criticality records
delete
Delete the Privilege Monitoring Engine
post
Disable the Privilege Monitoring Engine
post
Initialize the Privilege Monitoring Engine
post
Schedule the Privilege Monitoring Engine
get
Health check on Privilege Monitoring
get
Run a privileges check on Privilege Monitoring
post
Create a new monitored user
post
Upsert multiple monitored users via CSV upload
put
Update a monitored user
delete
Delete a monitored user
get
List all monitored users
post
Installs the privileged access detection package for the Entity Analytics privileged user monitoring experience
get
Gets the status of the privileged access detection package for the Entity Analytics privileged user monitoring experience
post
Create a new watchlist
get
Get a watchlist by ID
put
Update an existing watchlist
post
Upload a CSV file to add entities to a watchlist
post
Manually assign entities to a watchlist
post
Manually unassign entities from a watchlist
get
List all watchlists
delete
Cleanup the Risk Engine
patch
Configure the Risk Engine Saved Object
post
Run the risk scoring engine
get
Get risk score history for an entity
Security entity store
17
Security Exceptions API
16
Security Lists API
18
Security Osquery API
21
Security Solution Initialization API
1
Security Timeline API
17
short url
4
significant_events
5
slo
15
spaces
9
streams
18
synthetics
18
system
2
Tags
5
task manager
1
upgrade
1
uptime
2
user session
1
Visualizations
5
workflows
31
get
post
Query roles
post
Resolve conflicts copying saved objects