Search skmtc
⌘K
Docs
Sign in
Docs
History
Schema
Generate
Filter operations
agent builder
44
alerting
23
alerting-v2
50
get
/api/alerting/v2/action_policies
List action policies
post
/api/alerting/v2/action_policies
Create an action policy
post
/api/alerting/v2/action_policies/_bulk_delete
Delete action policies in bulk by ID
post
/api/alerting/v2/action_policies/_bulk_disable
Disable action policies in bulk by ID
post
/api/alerting/v2/action_policies/_bulk_enable
Enable action policies in bulk by ID
post
/api/alerting/v2/action_policies/_bulk_snooze
Snooze action policies in bulk by ID
post
/api/alerting/v2/action_policies/_bulk_unsnooze
Cancel snooze for action policies in bulk by ID
post
/api/alerting/v2/action_policies/_bulk_update_api_key
Rotate API keys for action policies in bulk by ID
get
/api/alerting/v2/action_policies/{id}
Get an action policy
put
/api/alerting/v2/action_policies/{id}
Create or replace an action policy
delete
/api/alerting/v2/action_policies/{id}
Delete an action policy
patch
/api/alerting/v2/action_policies/{id}
Partially update an action policy.
post
/api/alerting/v2/action_policies/{id}/_disable
Disable an action policy
post
/api/alerting/v2/action_policies/{id}/_enable
Enable an action policy
post
/api/alerting/v2/action_policies/{id}/_snooze
Snooze an action policy
post
/api/alerting/v2/action_policies/{id}/_unsnooze
Unsnooze an action policy
post
/api/alerting/v2/action_policies/{id}/_update_api_key
Update an action policy API key
post
/api/alerting/v2/alerts/_bulk_ack
Bulk acknowledge alerts
post
/api/alerting/v2/alerts/_bulk_activate
Bulk activate alerts
post
/api/alerting/v2/alerts/_bulk_assign
Bulk assign alerts
post
/api/alerting/v2/alerts/_bulk_deactivate
Bulk deactivate alerts
post
/api/alerting/v2/alerts/_bulk_tag
Bulk tag alerts
post
/api/alerting/v2/alerts/_bulk_unack
Bulk unacknowledge alerts
post
/api/alerting/v2/alerts/{id}/_ack
Acknowledge an alert
post
/api/alerting/v2/alerts/{id}/_activate
Activate an alert
post
/api/alerting/v2/alerts/{id}/_assign
Assign an alert to a user
post
/api/alerting/v2/alerts/{id}/_deactivate
Deactivate an alert
post
/api/alerting/v2/alerts/{id}/_tag
Tag an alert
post
/api/alerting/v2/alerts/{id}/_unack
Unacknowledge an alert
get
/api/alerting/v2/execution_history/action_policies
List action policy executions
get
/api/alerting/v2/execution_history/rules
List rule executions
get
/api/alerting/v2/rules
List rules
post
/api/alerting/v2/rules
Create a rule
post
/api/alerting/v2/rules/_bulk_create
Create rules in bulk
post
/api/alerting/v2/rules/_bulk_delete
Delete rules in bulk by ID
post
/api/alerting/v2/rules/_bulk_disable
Disable rules in bulk by ID
post
/api/alerting/v2/rules/_bulk_enable
Enable rules in bulk by ID
post
/api/alerting/v2/rules/_bulk_get
Get rules in bulk
post
/api/alerting/v2/rules/_bulk_update_api_key
Update the API key of rules in bulk by ID
post
/api/alerting/v2/rules/_delete_by_query
Delete rules matching a query (dry-run by default)
post
/api/alerting/v2/rules/_disable_by_query
Disable rules matching a query (dry-run by default)
post
/api/alerting/v2/rules/_enable_by_query
Enable rules matching a query (dry-run by default)
post
/api/alerting/v2/rules/_update_api_key_by_query
Update the API key of rules matching a query (dry-run by default)
get
/api/alerting/v2/rules/{id}
Get a rule
put
/api/alerting/v2/rules/{id}
Create or replace a rule
delete
/api/alerting/v2/rules/{id}
Delete a rule
patch
/api/alerting/v2/rules/{id}
Update a rule
post
/api/alerting/v2/rules/{id}/_disable
Disable a rule
post
/api/alerting/v2/rules/{id}/_enable
Enable a rule
post
/api/alerting/v2/rules/{id}/_run
Run a rule now
APM agent configuration
7
APM agent keys
1
APM annotations
2
APM server schema
1
APM sourcemaps
3
cases
34
connectors
11
context engine
7
Dashboards
5
Data streams
3
data views
15
data-views-v2
5
Discover sessions
5
Elastic Agent actions
18
Elastic Agent binary download sources
5
Elastic Agent policies
14
Elastic Agent status
1
Elastic Agents
18
Elastic Package Manager (EPM)
36
Fleet agentless policies
7
Fleet cloud connectors
6
Fleet cloud onboarding deployments
5
Fleet enrollment API keys
5
Fleet internals
7
Fleet managed integrations
7
Fleet outputs
7
Fleet package policies
9
Fleet proxies
5
Fleet remote synced integrations
2
Fleet Server hosts
5
Fleet service tokens
1
Fleet uninstall tokens
3
Links
5
logstash
4
maintenance-window
7
Markdowns
5
Message Signing Service
1
ml
3
observability_ai_assistant
1
roles
5
saved objects
16
Security AI Assistant API
21
Security Attack discovery API
16
Security Detections API
29
Security Endpoint Exceptions API
6
Security Endpoint Management API
29
Security Entity Analytics API
29
Security entity store
19
Security Exceptions API
16
Security Lists API
18
Security Osquery API
21
Security Solution Initialization API
1
Security Timeline API
17
short url
4
slo
15
spaces
9
streams
18
synthetics
20
system
2
Tags
5
task manager
1
Universal Profiling
2
upgrade
1
uptime
2
user session
1
Visualizations
5
workflows
32
post
/api/security/role/_query
Query roles
post
/api/spaces/_resolve_copy_saved_objects_errors
Resolve conflicts copying saved objects
alerting-v2
Copy
Copy Markdown
Copy Markdown
Copying…
Copied
Copy failed
Changes to Enable rules matching a query (dry-run by default)
post
/api/alerting/v2/rules/_enable_by_query
Aug 17, 2026
e9badbb5da99
Revision changes
info
endpoint added