v53

latestOpenAPI 3.0.3raw.githubusercontent.com2026-08-076771,7565.2 MB
Security Detections API

Initiate a detection alert migration

Spaces method and path for this operation:

<div><span class="operation-verb post">post</span>&nbsp;<span class="operation-path">/s/{space_id}/api/detection_engine/signals/migration</span></div>

Refer to Spaces for more information.

DEPRECATED. Legacy API for on-demand reindexing of old .siem-signals-* alert indices. Do not build new integrations; upgrade the Elastic Stack and rely on product-managed data lifecycle instead. WARNING: Migrations can be resource intensive and should be planned during a maintenance window.

Initiate a migration of detection alerts. Migrations are initiated per index. The process is not destructive and should not remove existing data, but it can consume significant cluster resources. Plan capacity accordingly.

post/api/detection_engine/signals/migration

Request body

indexstring[] required

Array of index names to migrate.

requests_per_secondinteger

The throttle for the migration task in sub-requests per second. Corresponds to requests_per_second on the Reindex API.

sizeinteger

Number of alerts to migrate per batch. Corresponds to the source.size option on the Reindex API.

slicesinteger

The number of subtasks for the migration task. Corresponds to slices on the Reindex API.

Response

Successful response