---
title: "Changes to Install the Entity Store"
method: POST
path: "/api/security/entity_store/install"
---

# Changes to Install the Entity Store

`POST /api/security/entity_store/install`

> Every recorded change to this endpoint, newest first.
> 176 revisions in range; 20 not diffed.

## Timeline

Changed in 3 of 176 revisions.

- **2026-09-12** `9d17cb2c40a6` — 11 info
- **2026-09-08** `cb4c6440bd85` — 11 info
- **2026-08-17** `5be5c88425ac` — 7 warning

## Changes

- **2026-09-12** `9d17cb2c40a6` — 11 info
  - the request property `logExtraction/additionalIndexPatterns` became nullable
  - the request property `logExtraction/delay` became nullable
  - the request property `logExtraction/docsLimit` became nullable
  - the request property `logExtraction/excludedIndexPatterns` became nullable
  - the request property `logExtraction/fieldHistoryLength` became nullable
  - the request property `logExtraction/frequency` became nullable
  - the request property `logExtraction/lookbackPeriod` became nullable
  - the request property `logExtraction/maxLogsPerPage` became nullable
  - the request property `logExtraction/maxLogsPerWindow` became nullable
  - the request property `logExtraction/maxLogsPerWindowCapBehavior` became nullable
  - the request property `logExtraction/maxTimeWindowSize` became nullable
- **2026-09-08** `cb4c6440bd85` — 11 info
  - the `additionalIndexPatterns` request property default value `` was removed
  - the `delay` request property default value `1m` was removed
  - the `docsLimit` request property default value `10000` was removed
  - the `excludedIndexPatterns` request property default value `` was removed
  - the `fieldHistoryLength` request property default value `10` was removed
  - the `frequency` request property default value `1m` was removed
  - the `lookbackPeriod` request property default value `3h` was removed
  - the `maxLogsPerPage` request property default value `50000` was removed
  - the `maxLogsPerWindow` request property default value `100000` was removed
  - the `maxLogsPerWindowCapBehavior` request property default value `drop` was removed
  - the `maxTimeWindowSize` request property default value `15m` was removed
- **2026-08-17** `5be5c88425ac` — 7 warning
  - the `historySnapshot/frequency` request property's maxLength was set to `32`
  - the `logExtraction/additionalIndexPatterns/items/` request property's maxLength was set to `2048`
  - the `logExtraction/delay` request property's maxLength was set to `32`
  - the `logExtraction/excludedIndexPatterns/items/` request property's maxLength was set to `2048`
  - the `logExtraction/frequency` request property's maxLength was set to `32`
  - the `logExtraction/lookbackPeriod` request property's maxLength was set to `32`
  - the `logExtraction/maxTimeWindowSize` request property's maxLength was set to `32`

---

[Operation](https://skmtc.dev/elastic/apis/kibana-apis/docs/api/security/entity_store/install/post.md) · [API](https://skmtc.dev/elastic/apis/kibana-apis.md) · [Page](https://skmtc.dev/elastic/apis/kibana-apis/changes/api/security/entity_store/install/post)