Search skmtc
⌘K
Docs
Sign in
Docs
History
Schema
Generate
Filter operations
agent builder
44
alerting
23
alerting-v2
50
APM agent configuration
7
APM agent keys
1
APM annotations
2
APM server schema
1
APM sourcemaps
3
cases
40
connectors
11
context engine
7
Dashboards
5
Data streams
3
data views
15
data-views-v2
5
Discover sessions
5
Elastic Agent actions
18
Elastic Agent binary download sources
5
Elastic Agent policies
14
Elastic Agent status
1
Elastic Agents
18
Elastic Package Manager (EPM)
36
Fleet agentless policies
7
Fleet cloud connectors
6
Fleet cloud onboarding deployments
5
Fleet enrollment API keys
5
Fleet internals
7
Fleet managed integrations
7
Fleet outputs
7
Fleet package policies
9
Fleet proxies
5
Fleet remote synced integrations
2
Fleet Server hosts
5
Fleet service tokens
1
Fleet uninstall tokens
3
Links
5
logstash
4
maintenance-window
7
Markdowns
5
Message Signing Service
1
ml
3
observability_ai_assistant
1
roles
5
saved objects
16
Security AI Assistant API
21
Security Attack discovery API
16
Security Detections API
29
Security Endpoint Exceptions API
6
Security Endpoint Management API
29
Security Entity Analytics API
29
get
/api/asset_criticality
Get an asset criticality record
post
/api/asset_criticality
Upsert an asset criticality record
delete
/api/asset_criticality
Delete an asset criticality record
post
/api/asset_criticality/bulk
Bulk upsert asset criticality records
get
/api/asset_criticality/list
List asset criticality records
delete
/api/entity_analytics/monitoring/engine/delete
Delete the Privilege Monitoring Engine
post
/api/entity_analytics/monitoring/engine/disable
Disable the Privilege Monitoring Engine
post
/api/entity_analytics/monitoring/engine/init
Initialize the Privilege Monitoring Engine
post
/api/entity_analytics/monitoring/engine/schedule_now
Schedule the Privilege Monitoring Engine
get
/api/entity_analytics/monitoring/privileges/health
Health check on Privilege Monitoring
get
/api/entity_analytics/monitoring/privileges/privileges
Run a privileges check on Privilege Monitoring
post
/api/entity_analytics/monitoring/users
Create a new monitored user
post
/api/entity_analytics/monitoring/users/_csv
Upsert multiple monitored users via CSV upload
put
/api/entity_analytics/monitoring/users/{id}
Update a monitored user
delete
/api/entity_analytics/monitoring/users/{id}
Delete a monitored user
get
/api/entity_analytics/monitoring/users/list
List all monitored users
post
/api/entity_analytics/privileged_user_monitoring/pad/install
Installs the privileged access detection package for the Entity Analytics privileged user monitoring experience
get
/api/entity_analytics/privileged_user_monitoring/pad/status
Gets the status of the privileged access detection package for the Entity Analytics privileged user monitoring experience
post
/api/entity_analytics/watchlists
Create a new watchlist
get
/api/entity_analytics/watchlists/{id}
Get a watchlist by ID
put
/api/entity_analytics/watchlists/{id}
Update an existing watchlist
post
/api/entity_analytics/watchlists/{watchlist_id}/csv_upload
Upload a CSV file to add entities to a watchlist
post
/api/entity_analytics/watchlists/{watchlist_id}/entities/assign
Manually assign entities to a watchlist
post
/api/entity_analytics/watchlists/{watchlist_id}/entities/unassign
Manually unassign entities from a watchlist
get
/api/entity_analytics/watchlists/list
List all watchlists
delete
/api/risk_score/engine/dangerously_delete_data
Cleanup the Risk Engine
patch
/api/risk_score/engine/saved_object/configure
Configure the Risk Engine Saved Object
post
/api/risk_score/engine/schedule_now
Run the risk scoring engine
get
/api/risk_score/history
Get risk score history for an entity
Security entity store
19
Security Exceptions API
16
Security Lists API
18
Security Osquery API
21
Security Solution Initialization API
1
Security Timeline API
17
short url
4
slo
15
spaces
9
streams
18
synthetics
20
system
2
Tags
5
task manager
1
Universal Profiling
2
upgrade
1
uptime
2
user session
1
Visualizations
5
workflows
32
post
/api/security/role/_query
Query roles
post
/api/spaces/_resolve_copy_saved_objects_errors
Resolve conflicts copying saved objects
Security Entity Analytics API
Copy
Copy Markdown
Copy Markdown
Copying…
Copied
Copy failed
Changes to Upsert multiple monitored users via CSV upload
post
/api/entity_analytics/monitoring/users/_csv
Aug 17, 2026
859ea1f65726
Revision changes
info
endpoint deprecated