Security entity store

Update the Entity Store

Changed on

Spaces method and path for this operation:

<div><span class="operation-verb put">put</span>&nbsp;<span class="operation-path">/s/{space_id}/api/security/entity_store</span></div>

Refer to Spaces for more information.

Update the Entity Store configuration without reinstalling. Send logExtraction to change log extraction settings. Omitting a log extraction field leaves it unchanged. Sending null for a log extraction field clears that override and reverts to the entity type default (for frequency: 1m for host and user, 10m for service, 30m for generic). Send historySnapshot.frequency to change the snapshot interval (at least 1 hour) and historySnapshot.retentionDays to change how long snapshots are kept. Omitting either history snapshot field leaves it unchanged. At least one of logExtraction, excludedUserNames or historySnapshot is required.<br/><br/>[Required authorization] Route required privileges: securitySolution.

put/api/security/entity_store

Request

  • Base URL
    https://localhost:5601
  • URL
    https://localhost:5601/api/security/entity_store
  • Auth
    • API key in header Authorization
    • or HTTP basic

Headers

kbn-xsrfstring required
Example:true

A required header to protect against CSRF attacks

Request body

excludedUserNamesstring[]

Response

Indicates a successful response.

Changes

  • 9d17cb2c40a6Revision changes
    • info

      the request property / became nullable

    • info

      the request property / became nullable

    • info

      the request property / became nullable

    • info

      the request property / became nullable

    • info

      the request property / became nullable

    • info

      the request property / became nullable

    • info

      the request property / became nullable

    • info

      the request property / became nullable

    • info

      the request property / became nullable

    • info

      the request property / became nullable

    • info

      the request property / became nullable

  • cb4c6440bd85Revision changes
    • info

      the request property default value was removed

    • info

      the request property default value 1m was removed

    • info

      the request property default value 10000 was removed

    • info

      the request property default value was removed

    • info

      the request property default value 10 was removed

    • info

      the request property default value 1m was removed

    • info

      the request property default value 3h was removed

    • info

      the request property default value 50000 was removed

    • info

      the request property default value 100000 was removed

    • info

      the request property default value drop was removed

    • info

      the request property default value 15m was removed