Sign in

v1

latestOpenAPI 3.1.0Elastic 2.02026-07-179371211.2 KB
Assistant

Get Assistant Sessions

Get chat session metadata from a specific user.

get/api/assistant/admin/{userId}/sessions

Path parameters

userIdstring required

ID of the user to retrieve sessions from

Response

List of previous conversation sessions

createTimestring

The date and time that this object was created. This is a read-only field.

deleteTimestring

The time the session was deleted.

entityIdstring

The entity ID associated with this session (e.g., alert soc_id).

idstring

The ID assigned to this object by the server. This is a read-only field.

kindstring

The kind of object. This is a read-only field.

operationstring

The operation that was applied to the object. This is a read-only field.

sessionIdstring

The session identifier.

tagsstring[]

Metadata about the session.

titlestring

The title of the session. Usually the first message sent by the user.

typestring

The type of session (e.g., "alert_investigation").

updateTimestring

The date and time that this object was last modified. This is a read-only field.

userIdstring

The user ID (or API client ID) that initiated this event. This is a read-only field.

Example response

[
  {
    "createTime": "2024-11-14T15:03:22Z",
    "deleteTime": "2025-09-05T15:33:00.000Z",
    "entityId": "WKhCuTw4GPvrQA-9ksmn",
    "id": "PdFc-JIBLkNJ8-bDfz47",
    "kind": "case",
    "operation": "create",
    "sessionId": "chat_1757086398900_ykhmndscn",
    "tags": [
      "investigation"
    ],
    "title": "Can you write a suricata rule for me?",
    "type": "alert_investigation",
    "updateTime": "2024-11-14T15:33:02Z",
    "usage": {
      "totalCredits": 5,
      "totalInputTokens": 1500,
      "totalMessages": 25,
      "totalOutputTokens": 3000
    },
    "userId": "socl_my_new_client"
  }
]
All 93 operations