Search skmtc

⌘K

Docs
History
Schema
Generate

Filter operations

agent builder44

alerting23

alerting-v250

get/api/alerting/v2/action_policiesList action policies
post/api/alerting/v2/action_policiesCreate an action policy
post/api/alerting/v2/action_policies/_bulk_deleteDelete action policies in bulk by ID
post/api/alerting/v2/action_policies/_bulk_disableDisable action policies in bulk by ID
post/api/alerting/v2/action_policies/_bulk_enableEnable action policies in bulk by ID
post/api/alerting/v2/action_policies/_bulk_snoozeSnooze action policies in bulk by ID
post/api/alerting/v2/action_policies/_bulk_unsnoozeCancel snooze for action policies in bulk by ID
post/api/alerting/v2/action_policies/_bulk_update_api_keyRotate API keys for action policies in bulk by ID
get/api/alerting/v2/action_policies/{id}Get an action policy
put/api/alerting/v2/action_policies/{id}Create or replace an action policy
delete/api/alerting/v2/action_policies/{id}Delete an action policy
patch/api/alerting/v2/action_policies/{id}Partially update an action policy.
post/api/alerting/v2/action_policies/{id}/_disableDisable an action policy
post/api/alerting/v2/action_policies/{id}/_enableEnable an action policy
post/api/alerting/v2/action_policies/{id}/_snoozeSnooze an action policy
post/api/alerting/v2/action_policies/{id}/_unsnoozeUnsnooze an action policy
post/api/alerting/v2/action_policies/{id}/_update_api_keyUpdate an action policy API key
post/api/alerting/v2/alerts/_bulk_ackBulk acknowledge alerts
post/api/alerting/v2/alerts/_bulk_activateBulk activate alerts
post/api/alerting/v2/alerts/_bulk_assignBulk assign alerts
post/api/alerting/v2/alerts/_bulk_deactivateBulk deactivate alerts
post/api/alerting/v2/alerts/_bulk_tagBulk tag alerts
post/api/alerting/v2/alerts/_bulk_unackBulk unacknowledge alerts
post/api/alerting/v2/alerts/{id}/_ackAcknowledge an alert
post/api/alerting/v2/alerts/{id}/_activateActivate an alert
post/api/alerting/v2/alerts/{id}/_assignAssign an alert to a user
post/api/alerting/v2/alerts/{id}/_deactivateDeactivate an alert
post/api/alerting/v2/alerts/{id}/_tagTag an alert
post/api/alerting/v2/alerts/{id}/_unackUnacknowledge an alert
get/api/alerting/v2/execution_history/action_policiesList action policy executions
get/api/alerting/v2/execution_history/rulesList rule executions
get/api/alerting/v2/rulesList rules
post/api/alerting/v2/rulesCreate a rule
post/api/alerting/v2/rules/_bulk_createCreate rules in bulk
post/api/alerting/v2/rules/_bulk_deleteDelete rules in bulk by ID
post/api/alerting/v2/rules/_bulk_disableDisable rules in bulk by ID
post/api/alerting/v2/rules/_bulk_enableEnable rules in bulk by ID
post/api/alerting/v2/rules/_bulk_getGet rules in bulk
post/api/alerting/v2/rules/_bulk_update_api_keyUpdate the API key of rules in bulk by ID
post/api/alerting/v2/rules/_delete_by_queryDelete rules matching a query (dry-run by default)
post/api/alerting/v2/rules/_disable_by_queryDisable rules matching a query (dry-run by default)
post/api/alerting/v2/rules/_enable_by_queryEnable rules matching a query (dry-run by default)
post/api/alerting/v2/rules/_update_api_key_by_queryUpdate the API key of rules matching a query (dry-run by default)
get/api/alerting/v2/rules/{id}Get a rule
put/api/alerting/v2/rules/{id}Create or replace a rule
delete/api/alerting/v2/rules/{id}Delete a rule
patch/api/alerting/v2/rules/{id}Update a rule
post/api/alerting/v2/rules/{id}/_disableDisable a rule
post/api/alerting/v2/rules/{id}/_enableEnable a rule
post/api/alerting/v2/rules/{id}/_runRun a rule now

APM agent configuration7

APM agent keys1

APM annotations2

APM server schema1

APM sourcemaps3

cases40

connectors11

context engine7

Dashboards5

Data streams3

data views15

data-views-v25

Discover sessions5

Elastic Agent actions18

Elastic Agent binary download sources5

Elastic Agent policies14

Elastic Agent status1

Elastic Agents18

Elastic Package Manager (EPM)36

Fleet agentless policies7

Fleet cloud connectors6

Fleet cloud onboarding deployments5

Fleet enrollment API keys5

Fleet internals7

Fleet managed integrations7

Fleet outputs7

Fleet package policies9

Fleet proxies5

Fleet remote synced integrations2

Fleet Server hosts5

Fleet service tokens1

Fleet uninstall tokens3

Links5

logstash4

maintenance-window7

Markdowns5

Message Signing Service1

ml3

observability_ai_assistant1

roles5

saved objects16

Security AI Assistant API21

Security Attack discovery API16

Security Detections API29

Security Endpoint Exceptions API6

Security Endpoint Management API29

Security Entity Analytics API29

Security entity store19

Security Exceptions API16

Security Lists API18

Security Osquery API21

Security Solution Initialization API1

Security Timeline API17

short url4

slo15

spaces9

streams18

synthetics20

system2

Tags5

task manager1

Universal Profiling2

upgrade1

uptime2

user session1

Visualizations5

workflows32

post/api/security/role/_queryQuery roles
post/api/spaces/_resolve_copy_saved_objects_errorsResolve conflicts copying saved objects

alerting-v2

Changes to Disable rules matching a query (dry-run by default)

post/api/alerting/v2/rules/_disable_by_query

Aug 17, 2026e9badbb5da99 Revision changes
- info
  endpoint added