deb2e8b751e7

latestOpenAPI 3.0.3raw.githubusercontent.com2026-08-106771,7565.2 MB
Security entity store

Unlink entities

Spaces method and path for this operation:

<div><span class="operation-verb post">post</span>&nbsp;<span class="operation-path">/s/{space_id}/api/security/entity_store/resolution/unlink</span></div>

Refer to Spaces for more information.

Remove one or more entities from their resolution group. Changes become visible on subsequent reads after the next index refresh (typically <1s).<br/><br/>[Required authorization] Route required privileges: securitySolution AND securitySolution-entity-analytics.

post/api/security/entity_store/resolution/unlink

Headers

kbn-xsrfstring required
Example:true

A required header to protect against CSRF attacks

Request body

entity_idsstring[] required

Entity identifiers to unlink from their resolution group. Minimum 1, maximum 1000.

Response

Indicates a successful response.