v53

latestOpenAPI 3.0.3raw.githubusercontent.com2026-08-076771,7565.2 MB
significant_events

Upsert a query to a stream

Spaces method and path for this operation:

<div><span class="operation-verb put">put</span>&nbsp;<span class="operation-path">/s/{space_id}/api/streams/{name}/queries/{queryId}</span></div>

Refer to Spaces for more information.

Adds a query to a stream. Noop if the query is already present on the stream.<br/><br/>[Required authorization] Route required privileges: manage_stream.

put/api/streams/{name}/queries/{queryId}

Path parameters

namestring required

The name of the stream.

queryIdstring required

The identifier of the query.

Headers

kbn-xsrfstring required
Example:true

A required header to protect against CSRF attacks

Request body

descriptionstring
evidencestring[]
expires_atstring date-time
severity_scorenumber
titlestring required

A non-empty string.

Response

The query was added or updated successfully.