Kibana API logo
Elastic APIs hub
  • Elastic Cloud API
  • Elastic Cloud Enterprise API
  • Elastic Cloud Serverless API
  • Elasticsearch API
  • Elasticsearch Serverless API
  • Kibana API
  • Kibana Serverless API
  • Observability Intake Serverless API
Back to hub page
API Changelog
Download source
  • JSON OpenAPI specification
  • YAML OpenAPI specification
Feedback
v8
  • main default
  • v8

Topics

  • Introduction
  • Authentication
  • Kibana spaces

Endpoints

  • Alerting
    • Get the alerting framework health GET
    • Create a rule with a random identifier POST
    • Get the rule types GET
    • Get rule details GET
    • Update a rule PUT
    • Create a rule POST
    • Delete a rule DELETE
    • Disable a rule POST
    • Enable a rule POST
    • Mute all alerts POST
    • Unmute all alerts POST
    • Update the API key for a rule POST
    • Mute an alert POST
    • Unmute an alert POST
    • Find rule information GET
    • Get an alert by identifier GET
    • Update an alert PUT
    • Create an alert POST
    • Delete an alert DELETE
    • Disable an alert POST
    • Enable an alert POST
    • Mute all alert instances POST
    • Unmute all alert instances POST
    • Mute an alert instance POST
    • Unmute an alert instance POST
    • Get a paginated set of alerts GET
    • Get the alerting framework health GET
    • Get the alert types GET
  • APM agent keys
    • Create an APM agent key POST
  • APM annotations
    • Create a service annotation POST
    • Search for annotations GET
  • Cases
    • Create a case POST
    • Delete cases DELETE
    • Update cases PATCH
    • Search cases GET
    • Get case information GET
    • Get all alerts for a case GET
    • Get all case comments GET
    • Add a case comment or alert POST
    • Delete all case comments and alerts DELETE
    • Update a case comment or alert PATCH
    • Find case comments and alerts GET
    • Get a case comment or alert GET
    • Delete a case comment or alert DELETE
    • Push a case to an external service POST
    • Get case activity GET
    • Find case activity GET
    • Get cases for an alert GET
    • Get case settings GET
    • Add case settings POST
    • Update case settings PATCH
    • Get case connectors GET
    • Get case creators GET
    • Get case status summary GET
    • Get case tags GET
  • Connectors
    • Get all connectors GET
    • Create a connector POST
    • Get connector information GET
    • Update a connector PUT
    • Delete a connector DELETE
    • Run a connector POST
    • Create a connector with a random ID POST
    • Get all connector types GET
    • Get a connector information GET
    • Update a connector PUT
    • Create a connector POST
    • Delete a connector DELETE
    • Run a connector POST
    • Get all connectors GET
    • Get connector types GET
  • Data streams
    • List data streams GET
  • Data views
    • Get all data views GET
    • Create a data view POST
    • Get a data view GET
    • Update a data view POST
    • Delete a data view DELETE
    • Update data view fields metadata POST
    • Create or update a runtime field PUT
    • Create a runtime field POST
    • Get a runtime field GET
    • Update a runtime field POST
    • Delete a runtime field from a data view DELETE
    • Get the default data view GET
    • Set the default data view POST
    • Swap saved object references POST
    • Preview a saved object reference swap POST
  • Elastic Agents
    • List agents GET
    • List agents by action ids POST
    • Get agent by ID GET
    • Update agent by ID PUT
    • Delete agent by ID DELETE
    • Reassign agent PUT
    • Reassign agent POST
    • Request agent diagnostics POST
    • Unenroll agent POST
    • Upgrade agent POST
    • List agent uploads GET
    • Bulk reassign agents POST
    • Bulk request diagnostics from agents POST
    • Bulk unenroll agents POST
    • Bulk update agent tags POST
    • Bulk upgrade agents POST
    • Delete file uploaded by agent DELETE
    • Get file uploaded by agent GET
    • Get agent setup info GET
    • Initiate agent setup POST
    • List agent tags GET
  • Elastic Agent actions
    • Create agent action POST
    • Cancel agent action POST
    • Get agent action status GET
  • Elastic Agent binary download sources
    • List agent binary download sources GET
    • Create agent binary download source POST
    • Get agent binary download source by ID GET
    • Update agent binary download source by ID PUT
    • Delete agent binary download source by ID DELETE
  • Elastic Agent policies
    • List agent policies GET
    • Create agent policy POST
    • Bulk get agent policies POST
    • Get agent policy by ID GET
    • Update agent policy by ID PUT
    • Copy agent policy by ID POST
    • Download agent policy by ID GET
    • Get full agent policy by ID GET
    • Delete agent policy by ID POST
  • Elastic Agent status
    • Get agent status summary GET
    • Get incoming agent data GET
    • Get agent status summary GET
  • Elastic Package Manager (EPM)
    • Bulk get assets POST
    • List package categories GET
    • List packages GET
    • Install by package by direct upload POST
    • Bulk install packages POST
    • Get package GET
    • Install package POST
    • Delete ackage DELETE
    • Get package GET
    • Update package settings PUT
    • Install package POST
    • Delete package DELETE
    • Get package file GET
    • Authorize transforms POST
    • Get package stats GET
    • Get limited package list GET
    • Get inputs template GET
    • Get package signature verification key ID GET
  • Fleet enrollment API keys
    • List enrollment API keys GET
    • Create enrollment API key POST
    • Get enrollment API key by ID GET
    • Delete enrollment API key by ID DELETE
    • List enrollment API keys GET
    • Create enrollment API key POST
    • Get enrollment API key by ID GET
    • Delete enrollment API key by ID DELETE
  • Fleet internals
    • Fleet Server health check POST
    • Get settings GET
    • Update settings PUT
    • Initiate Fleet setup POST
  • Fleet Kubernetes
    • Get full K8s agent manifest GET
  • Fleet outputs
    • Generate Logstash API key POST
    • List outputs GET
    • Create output POST
    • Get output by ID GET
    • Update output by ID PUT
    • Delete output by ID DELETE
    • Get latest output health GET
  • Fleet package policies
    • List package policies GET
    • Create package policy POST
    • Bulk get package policies POST
    • Get package policy by ID GET
    • Update package policy by ID PUT
    • Delete package policy by ID DELETE
    • Delete package policy POST
    • Upgrade package policy to a newer package version POST
    • Dry run package policy upgrade POST
  • Fleet proxies
    • List proxies GET
    • Create proxy POST
    • Get proxy by ID GET
    • Update proxy by ID PUT
    • Delete proxy by ID DELETE
  • Fleet Server hosts
    • List Fleet Server hosts GET
    • Create Fleet Server host POST
    • Get Fleet Server host by ID GET
    • Update Fleet Server host by ID PUT
    • Delete Fleet Server host by ID DELETE
  • Fleet service tokens
    • Create service token POST
    • Create service token POST
  • Fleet uninstall tokens
    • List metadata for latest uninstall tokens per agent policy GET
    • Get one decrypted uninstall token by its ID GET
  • Machine learning
    • Sync saved objects in the default space GET
  • Saved objects
    • Rotate a key for encrypted saved objects POST
    • Create saved objects POST
    • Delete saved objects POST
    • Get saved objects POST
    • Resolve saved objects POST
    • Update saved objects POST
    • Export saved objects POST
    • Search for saved objects GET
    • Import saved objects POST
    • Resolve import errors POST
    • Create a saved object POST
    • Get a saved object GET
    • Update a saved object PUT
    • Create a saved object POST
    • Resolve a saved object GET
  • Service level objectives
    • Get a paginated list of SLOs GET
    • Create an SLO POST
    • Batch delete rollup and summary data POST
    • Get an SLO GET
    • Update an SLO PUT
    • Delete an SLO DELETE
    • Reset an SLO POST
    • Disable an SLO POST
    • Enable an SLO POST
  • System
    • Get Kibana's current status GET
Powered by Bump.sh