---
title: "Reads the alert index name if it exists"
method: GET
path: "/api/detection_engine/index"
tags: ["Security Detections API"]
---

# Reads the alert index name if it exists

`GET /api/detection_engine/index`

**Spaces method and path for this operation:**

<div><span class="operation-verb get">get</span>&nbsp;<span class="operation-path">/s/{space_id}/api/detection_engine/index</span></div>

Refer to [Spaces](https://www.elastic.co/docs/deploy-manage/manage-spaces) for more information.

Returns the backing Elasticsearch index for Elastic Security detection alerts in the current space, and
whether its mapping is outdated. Use this to verify that an alert index is provisioned before creating
or running rules that write alerts to it.

## Response `200`

Successful response

- object
  - `index_mapping_outdated` boolean, nullable, required
  - `name` string, required

## Other responses

- `401` — Unsuccessful authentication response
- `403` — Not enough permissions response
- `404` — Not found
- `500` — Internal server error response

---

[API](https://skmtc.net/elastic/apis/kibana-apis.md) · [All operations](https://skmtc.net/elastic/apis/kibana-apis/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/elastic/kibana-apis/versions/531c9e2a7d23/schema)