---
title: "Retrieve the status of detection alert migrations"
method: GET
path: "/api/detection_engine/signals/migration_status"
tags: ["Security Detections API"]
deprecated: true
---

# Retrieve the status of detection alert migrations

`GET /api/detection_engine/signals/migration_status`

> **Deprecated.**

**Spaces method and path for this operation:**

<div><span class="operation-verb get">get</span>&nbsp;<span class="operation-path">/s/{space_id}/api/detection_engine/signals/migration_status</span></div>

Refer to [Spaces](https://www.elastic.co/docs/deploy-manage/manage-spaces) for more information.

**DEPRECATED.** This endpoint was used for historical `.siem-signals-*` index migration workflows. Do not use
for new automations; there is no supported replacement in this public API.
**WARNING:** Prefer upgrading through supported Elastic stack upgrades rather than ad-hoc index migrations.

Retrieves indices that contain detection alerts of a particular age, along with migration information for
each of those indices.

## Query parameters

- `from` string, date-math, required — Time from which data is analyzed. For example, now-4200s means the rule analyzes data from 70 minutes before its start time. Defaults to now-6m (analyzes data from 6 minutes before the start time).

## Response `200`

Successful response

- object
  - `indices` SecurityDetectionsAPIIndexMigrationStatus[], required
    - `index` string, nonempty, required — A string that does not contain only whitespace characters
    - `is_outdated` boolean, required
    - `migrations` SecurityDetectionsAPIMigrationStatus[], required
      - `id` string, nonempty, required — A string that does not contain only whitespace characters
      - `status` 'success' | 'failure' | 'pending', required
      - `updated` string, date-time, required
      - `version` integer, required
    - `signal_versions` SecurityDetectionsAPIAlertVersion[], required
      - `count` integer, required
      - `version` integer, required
    - `version` integer, required

## Other responses

- `400` — Invalid input data response
- `401` — Unsuccessful authentication response
- `500` — Internal server error response

---

[API](https://skmtc.net/elastic/apis/kibana-apis.md) · [All operations](https://skmtc.net/elastic/apis/kibana-apis/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/elastic/kibana-apis/versions/531c9e2a7d23/schema)