Change Updates

Do not miss any Kibana API changes, ever again

Subscribe to the Kibana API changelog to be up to date on recent changes.

RSS

28 days ago

main
1.0.2
Compare

API structure has changed

380 structure changes including:
93 Breaking changes
269 Additions
8 Modifications
103 Removals
Modified 8 Breaking
GET /api/alerting/rule/{id}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • flapping property Added
GET /api/alerting/rules/_find
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • flapping property Added
POST /api/actions/connector/{id}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • secrets property Modified
      • gemini_secrets alternative Modified
        • credentialsJson property Modified

          • Name went from credentialsJSON to credentialsJson

            Breaking

POST /api/alerting/rule/{id}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • flapping property Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • flapping property Added
POST /api/alerting/rule/{id}/_mute_all
  • Response
  • 400, 403, 404 responses Added
POST /api/alerting/rule/{id}/_unmute_all
  • Response
  • 400, 403, 404 responses Added
PUT /api/actions/connector/{id}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • secrets property Modified
      • gemini_secrets alternative Modified
        • credentialsJson property Modified

          • Name went from credentialsJSON to credentialsJson

            Breaking

PUT /api/alerting/rule/{id}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • flapping property Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • flapping property Added
Removed 103 Breaking
GET /api/fleet/epm/packages/{pkgName}/stats
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/epm/packages/limited
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/epm/packages
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/epm/categories
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/enrollment_api_keys/{keyId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/enrollment_api_keys
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/enrollment-api-keys/{keyId}
GET /api/fleet/enrollment-api-keys
GET /api/fleet/data_streams
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agents/{agentId}/uploads
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agents/{agentId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agents/tags
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}/{filePath}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/epm/packages/{pkgkey}
GET /api/fleet/epm/templates/{pkgName}/{pkgVersion}/inputs
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/epm/verification_key_id
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/fleet_server_hosts
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/fleet_server_hosts/{itemId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/kubernetes
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/outputs
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/outputs/{outputId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/outputs/{outputId}/health
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/epm/packages
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
DELETE /api/fleet/agent_download_sources/{sourceId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
DELETE /api/fleet/agents/files/{fileId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
DELETE /api/fleet/agents/{agentId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
DELETE /api/fleet/enrollment-api-keys/{keyId}
DELETE /api/fleet/enrollment_api_keys/{keyId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
DELETE /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
DELETE /api/fleet/epm/packages/{pkgkey}
DELETE /api/fleet/fleet_server_hosts/{itemId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
DELETE /api/fleet/outputs/{outputId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
DELETE /api/fleet/package_policies/{packagePolicyId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
DELETE /api/fleet/proxies/{itemId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agent-status
GET /api/fleet/agent_download_sources
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agent_download_sources/{sourceId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agent_policies
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agent_policies/{agentPolicyId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agent_policies/{agentPolicyId}/download
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agent_policies/{agentPolicyId}/full
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agent_status
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agent_status/data
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agents
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agents/action_status
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agents/files/{fileId}/{fileName}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agents/setup
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/epm/packages/_bulk
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}/transforms/authorize
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/epm/packages/{pkgkey}
POST /api/fleet/fleet_server_hosts
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/health_check
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/logstash_api_keys
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/outputs
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/package_policies
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/package_policies/_bulk_get
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/package_policies/delete
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/package_policies/upgrade
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/package_policies/upgrade/dryrun
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/proxies
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/service-tokens
POST /api/fleet/service_tokens
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/setup
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
PUT /api/fleet/agent_download_sources/{sourceId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
PUT /api/fleet/agent_policies/{agentPolicyId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
PUT /api/fleet/agents/{agentId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
PUT /api/fleet/agents/{agentId}/reassign
PUT /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
PUT /api/fleet/fleet_server_hosts/{itemId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
PUT /api/fleet/outputs/{outputId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
PUT /api/fleet/package_policies/{packagePolicyId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
PUT /api/fleet/proxies/{itemId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
PUT /api/fleet/settings
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/package_policies
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/package_policies/{packagePolicyId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/proxies
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/proxies/{itemId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/settings
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/uninstall_tokens
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/uninstall_tokens/{uninstallTokenId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agent_download_sources
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agent_policies
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agent_policies/_bulk_get
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agent_policies/delete
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agent_policies/{agentPolicyId}/copy
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/actions/{actionId}/cancel
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/epm/bulk_assets
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/enrollment_api_keys
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/enrollment-api-keys
POST /api/fleet/agents/{agentId}/upgrade
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/{agentId}/unenroll
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/{agentId}/request_diagnostics
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/{agentId}/reassign
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/{agentId}/actions
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/setup
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/bulk_upgrade
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/bulk_update_agent_tags
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/bulk_unenroll
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/bulk_request_diagnostics
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/bulk_reassign
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
Added 269
POST /api/fleet/package_policies/upgrade/dryrun
POST /api/fleet/package_policies/upgrade
POST /api/fleet/package_policies/delete
POST /api/fleet/package_policies/_bulk_get
POST /api/fleet/package_policies
POST /api/fleet/outputs
POST /api/fleet/message_signing_service/rotate_key_pair
POST /api/fleet/logstash_api_keys
POST /api/fleet/health_check
POST /api/fleet/fleet_server_hosts
POST /api/fleet/proxies
POST /api/fleet/service_tokens
POST /api/fleet/setup
POST /api/lists
POST /api/lists/index
POST /api/lists/items
POST /api/lists/items/_export
POST /api/lists/items/_import
POST /api/osquery/live_queries
PUT /api/detection_engine/rules/prepackaged
POST /api/fleet/agents
POST /api/fleet/agents/actions/{actionId}/cancel
POST /api/fleet/agents/bulk_reassign
POST /api/fleet/agents/bulk_request_diagnostics
POST /api/fleet/agents/bulk_unenroll
POST /api/fleet/agents/bulk_update_agent_tags
POST /api/fleet/agents/bulk_upgrade
POST /api/fleet/agents/setup
POST /api/fleet/agents/{agentId}/actions
POST /api/fleet/agents/{agentId}/reassign
POST /api/fleet/agents/{agentId}/request_diagnostics
POST /api/fleet/agents/{agentId}/unenroll
POST /api/fleet/agents/{agentId}/upgrade
POST /api/fleet/enrollment_api_keys
POST /api/fleet/epm/bulk_assets
POST /api/fleet/epm/custom_integrations
POST /api/fleet/epm/packages
POST /api/fleet/epm/packages/_bulk
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}/transforms/authorize
PUT /api/endpoint_list/items
PUT /api/exception_lists
PUT /api/exception_lists/items
PUT /api/fleet/agent_download_sources/{sourceId}
PUT /api/fleet/agent_policies/{agentPolicyId}
PUT /api/fleet/agents/{agentId}
PUT /api/fleet/epm/packages/{pkgName}/{pkgVersion}
PUT /api/fleet/fleet_server_hosts/{itemId}
PUT /api/fleet/outputs/{outputId}
PUT /api/fleet/package_policies/{packagePolicyId}
PUT /api/fleet/proxies/{itemId}
PUT /api/fleet/settings
PUT /api/lists
PUT /api/lists/items
PUT /api/osquery/packs/{id}
PUT /api/osquery/saved_queries/{id}
PUT /api/security/role/{name}
PUT /api/security_ai_assistant/current_user/conversations/{id}
PUT /api/spaces/space/{id}
POST /api/osquery/packs
POST /api/osquery/saved_queries
POST /api/risk_score/engine/schedule_now
POST /api/security/roles
POST /api/security_ai_assistant/anonymization_fields/_bulk_action
POST /api/security_ai_assistant/chat/complete
POST /api/security_ai_assistant/current_user/conversations
POST /api/security_ai_assistant/prompts/_bulk_action
POST /api/spaces/_copy_saved_objects
POST /api/spaces/_disable_legacy_url_aliases
POST /api/spaces/_get_shareable_references
POST /api/spaces/_update_objects_spaces
POST /api/spaces/space
POST /api/timeline
POST /api/timeline/_draft
POST /api/timeline/_export
POST /api/timeline/_import
POST /api/timeline/_prepackaged
PUT /api/detection_engine/rules
PUT /api/detection_engine/rules/_bulk_update
GET /api/fleet/agents/action_status
GET /api/fleet/agents
GET /api/fleet/agent_status/data
GET /api/fleet/agent_status
GET /api/fleet/agent_policies/{agentPolicyId}/outputs
GET /api/fleet/agent_policies/{agentPolicyId}/full
GET /api/fleet/agent_policies/{agentPolicyId}/download
GET /api/fleet/agent_policies/{agentPolicyId}
GET /api/fleet/agent_policies
GET /api/fleet/agent_download_sources/{sourceId}
GET /api/fleet/agent_download_sources
GET /api/exception_lists/summary
GET /api/exception_lists/items/_find
GET /api/exception_lists/items
GET /api/exception_lists/_find
GET /api/exception_lists
GET /api/entity_store/entities/list
GET /api/entity_store/engines/{entityType}
GET /api/entity_store/engines
GET /api/endpoint_list/items/_find
GET /api/endpoint_list/items
GET /api/endpoint/protection_updates_note/{package_policy_id}
GET /api/endpoint/policy_response
DELETE /api/osquery/saved_queries/{id}
GET /api/fleet/kubernetes/download
GET /api/fleet/kubernetes
GET /api/fleet/fleet_server_hosts/{itemId}
GET /api/fleet/fleet_server_hosts
GET /api/fleet/epm/verification_key_id
GET /api/fleet/epm/templates/{pkgName}/{pkgVersion}/inputs
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}/{filePath*}
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}
GET /api/fleet/epm/packages/{pkgName}/stats
GET /api/fleet/epm/packages/limited
GET /api/fleet/epm/packages/installed
GET /api/fleet/epm/packages
GET /api/fleet/epm/data_streams
GET /api/fleet/epm/categories
GET /api/fleet/enrollment_api_keys/{keyId}
GET /api/fleet/enrollment_api_keys
GET /api/fleet/data_streams
GET /api/fleet/check-permissions
GET /api/fleet/agents/{agentId}/uploads
GET /api/fleet/agents/{agentId}
GET /api/fleet/agents/tags
GET /api/fleet/agents/setup
GET /api/fleet/agents/files/{fileId}/{fileName}
GET /api/fleet/agents/available_versions
DELETE /api/osquery/packs/{id}
DELETE /api/note
DELETE /api/lists/items
DELETE /api/lists/index
DELETE /api/lists
DELETE /api/fleet/proxies/{itemId}
DELETE /api/fleet/package_policies/{packagePolicyId}
DELETE /api/fleet/outputs/{outputId}
DELETE /api/fleet/fleet_server_hosts/{itemId}
DELETE /api/fleet/epm/packages/{pkgName}/{pkgVersion}
DELETE /api/fleet/enrollment_api_keys/{keyId}
DELETE /api/fleet/agents/{agentId}
DELETE /api/fleet/agents/files/{fileId}
DELETE /api/fleet/agent_download_sources/{sourceId}
DELETE /api/exception_lists/items
DELETE /api/exception_lists
DELETE /api/entity_store/engines/{entityType}
DELETE /api/endpoint_list/items
DELETE /api/detection_engine/signals/migration
DELETE /api/detection_engine/rules/_bulk_delete
DELETE /api/detection_engine/rules
DELETE /api/detection_engine/index
DELETE /api/asset_criticality
GET /api/endpoint/policy/summaries
GET /api/endpoint/metadata/{id}
GET /api/endpoint/metadata/transforms
GET /api/endpoint/metadata
GET /api/endpoint/action_status
GET /api/endpoint/action_log/{agent_id}
GET /api/endpoint/action/{action_id}/file/{file_id}/download
GET /api/endpoint/action/{action_id}/file/{file_id}
GET /api/endpoint/action/{action_id}
GET /api/endpoint/action/state
GET /api/endpoint/action
GET /api/detection_engine/tags
GET /api/detection_engine/rules/prepackaged/_status
GET /api/detection_engine/rules/_find
GET /api/detection_engine/rules
GET /api/detection_engine/privileges
GET /api/detection_engine/index
GET /api/asset_criticality/list
GET /api/asset_criticality
DELETE /api/timeline
DELETE /api/spaces/space/{id}
DELETE /api/security_ai_assistant/current_user/conversations/{id}
DELETE /api/security/role/{name}
DELETE /api/risk_score/engine/dangerously_delete_data
POST /api/endpoint/action/unisolate
POST /api/endpoint/action/suspend_process
POST /api/endpoint/action/scan
POST /api/endpoint/action/running_procs
POST /api/endpoint/action/kill_process
POST /api/endpoint/action/isolate
POST /api/endpoint/action/get_file
POST /api/endpoint/action/execute
POST /api/detection_engine/signals/tags
POST /api/detection_engine/signals/status
POST /api/detection_engine/signals/search
POST /api/detection_engine/signals/migration_status
POST /api/detection_engine/signals/migration
POST /api/detection_engine/signals/finalize_migration
POST /api/detection_engine/signals/assignees
POST /api/detection_engine/rules/{id}/exceptions
POST /api/detection_engine/rules/preview
POST /api/detection_engine/rules/_import
POST /api/detection_engine/rules/_export
POST /api/detection_engine/rules/_bulk_delete
POST /api/detection_engine/rules/_bulk_create
POST /api/detection_engine/rules/_bulk_action
POST /api/detection_engine/rules
GET /api/osquery/saved_queries/{id}
POST /api/fleet/agent_policies/{agentPolicyId}/copy
POST /api/fleet/agent_policies/outputs
POST /api/fleet/agent_policies/delete
POST /api/fleet/agent_policies/_bulk_get
POST /api/fleet/agent_policies
POST /api/fleet/agent_download_sources
POST /api/exceptions/shared
POST /api/exception_lists/items
POST /api/exception_lists/_import
POST /api/exception_lists/_export
POST /api/exception_lists/_duplicate
POST /api/exception_lists
POST /api/entity_store/engines/{entityType}/stop
POST /api/entity_store/engines/{entityType}/stats
POST /api/entity_store/engines/{entityType}/start
POST /api/entity_store/engines/{entityType}/init
POST /api/entity_store/engines/apply_dataview_indices
POST /api/endpoint_list/items
POST /api/endpoint_list
POST /api/endpoint/unisolate
POST /api/endpoint/suggestions/{suggestion_type}
POST /api/endpoint/protection_updates_note/{package_policy_id}
POST /api/endpoint/isolate
POST /api/endpoint/action/upload
GET /api/osquery/saved_queries
GET /api/osquery/packs/{id}
GET /api/osquery/packs
GET /api/osquery/live_queries/{id}/results/{actionId}
GET /api/osquery/live_queries/{id}
GET /api/osquery/live_queries
GET /api/note
GET /api/lists/privileges
GET /api/lists/items/_find
GET /api/lists/items
GET /api/lists/index
GET /api/lists/_find
GET /api/lists
GET /api/fleet/uninstall_tokens/{uninstallTokenId}
GET /api/fleet/uninstall_tokens
GET /api/fleet/settings
GET /api/fleet/proxies/{itemId}
GET /api/fleet/proxies
GET /api/fleet/package_policies/{packagePolicyId}
GET /api/fleet/package_policies
GET /api/fleet/outputs/{outputId}/health
GET /api/fleet/outputs/{outputId}
GET /api/fleet/outputs
POST /api/detection_engine/index
POST /api/asset_criticality/bulk
POST /api/asset_criticality
PATCH /api/timeline/_favorite
PATCH /api/timeline
PATCH /api/pinned_event
PATCH /api/note
PATCH /api/lists/items
PATCH /api/lists
PATCH /api/detection_engine/rules/_bulk_update
PATCH /api/detection_engine/rules
GET /api/timelines
GET /api/timeline/resolve
GET /api/timeline/_draft
GET /api/timeline/_copy
GET /api/timeline
GET /api/spaces/space/{id}
GET /api/spaces/space
GET /api/security_ai_assistant/prompts/_find
GET /api/security_ai_assistant/current_user/conversations/{id}
GET /api/security_ai_assistant/current_user/conversations/_find
GET /api/security_ai_assistant/anonymization_fields/_find
GET /api/security/role/{name}
GET /api/security/role