---
title: "Changes to Preview rule alerts generated on specified time range"
method: POST
path: "/api/detection_engine/rules/preview"
---

# Changes to Preview rule alerts generated on specified time range

`POST /api/detection_engine/rules/preview`

> Every recorded change to this endpoint, newest first.
> 176 revisions in range; 20 not diffed.

## Timeline

Changed in 4 of 176 revisions.

- **2026-09-09** `f2ad87b81412` — 1 breaking, 1 info
- **2026-08-26** `04c196070f95` — 1 breaking, 1 info
- **2026-08-03** `f418569a8423` — 1 breaking, 1 info
- **2026-08-03** `707a2918b22b` — 1 breaking, 1 info

## Changes

- **2026-09-09** `f2ad87b81412` — 1 breaking, 1 info
  - removed `subschema #1, subschema #2, subschema #3, subschema #4, subschema #5, subschema #6, subschema #7, subschema #8` from the request body `anyOf` list
  - added `subschema #1, subschema #2, subschema #3, subschema #4, subschema #5, subschema #6, subschema #7, subschema #8` to the request body `anyOf` list
- **2026-08-26** `04c196070f95` — 1 breaking, 1 info
  - removed `subschema #1, subschema #2, subschema #3, subschema #4, subschema #5, subschema #6, subschema #7, subschema #8` from the request body `anyOf` list
  - added `subschema #1, subschema #2, subschema #3, subschema #4, subschema #5, subschema #6, subschema #7, subschema #8` to the request body `anyOf` list
- **2026-08-03** `f418569a8423` — 1 breaking, 1 info
  - removed `subschema #1, subschema #2, subschema #3, subschema #4, subschema #5, subschema #6, subschema #7, subschema #8` from the request body `anyOf` list
  - added `subschema #1, subschema #2, subschema #3, subschema #4, subschema #5, subschema #6, subschema #7, subschema #8` to the request body `anyOf` list
- **2026-08-03** `707a2918b22b` — 1 breaking, 1 info
  - removed `subschema #1, subschema #2, subschema #3, subschema #4, subschema #5, subschema #6, subschema #7, subschema #8` from the request body `anyOf` list
  - added `subschema #1, subschema #2, subschema #3, subschema #4, subschema #5, subschema #6, subschema #7, subschema #8` to the request body `anyOf` list

---

[Operation](https://skmtc.dev/elastic/apis/kibana-apis/docs/api/detection_engine/rules/preview/post.md) · [API](https://skmtc.dev/elastic/apis/kibana-apis.md) · [Page](https://skmtc.dev/elastic/apis/kibana-apis/changes/api/detection_engine/rules/preview/post)