agent builder43

alerting23

alerting-v250

APM agent configuration7

APM agent keys1

APM annotations2

APM server schema1

APM sourcemaps3

cases34

connectors9

Dashboards5

Data streams3

data views15

Elastic Agent actions16

Elastic Agent binary download sources5

Elastic Agent policies14

Elastic Agent status1

Elastic Agents18

Elastic Package Manager (EPM)36

Fleet agentless policies7

Fleet cloud connectors6

Fleet cloud onboarding deployments5

Fleet enrollment API keys5

Fleet internals7

Fleet managed integrations7

Fleet outputs7

Fleet package policies9

Fleet proxies5

Fleet remote synced integrations2

Fleet Server hosts5

Fleet service tokens1

Fleet uninstall tokens3

Links5

logstash4

maintenance-window7

Markdowns5

Message Signing Service1

ml3

observability_ai_assistant1

roles5

saved objects16

Security AI Assistant API21

Security Attack discovery API16

Security Detections API29

Security Endpoint Exceptions API6

Security Endpoint Management API29

Security Entity Analytics API29

Security entity store19

Security Exceptions API16

Security Lists API18

Security Osquery API21

Security Solution Initialization API1

Security Timeline API17

short url4

slo15

spaces9

streams18

synthetics19

system2

Tags5

task manager1

upgrade1

uptime2

user session1

Visualizations5

workflows32

Security entity store

Install the Entity Store

Spaces method and path for this operation:

<div><span class="operation-verb post">post</span> <span class="operation-path">/s/{space_id}/api/security/entity_store/install</span></div>

Refer to Spaces for more information.

Install the Entity Store and create engines for the specified entity types. A single logExtraction configuration is shared across all entity types. Supply it once at install to customize settings; omit it (or send an empty object) to use defaults on first install or preserve the existing configuration on re-install. Omitting a field leaves it unchanged. Sending null for a field clears that override and reverts to the default value. To change settings after install, use the update endpoint.<br/><br/>[Required authorization] Route required privileges: securitySolution.

post/api/security/entity_store/install

Headers

kbn-xsrfstring required

Example:true

A required header to protect against CSRF attacks

Request body

entityTypesstring[]

Response

Indicates all requested entity types are already installed.

Changes

Changed in 3 of the 176 revisions of this API.722

Sep 12, 20269d17cb2c40a611See the full diff
- ○
  the request property / became nullable
  request-property-became-nullable
- ○
  the request property / became nullable
  request-property-became-nullable
- ○
  the request property / became nullable
  request-property-became-nullable
- ○
  the request property / became nullable
  request-property-became-nullable
- ○
  the request property / became nullable
  request-property-became-nullable
- ○
  the request property / became nullable
  request-property-became-nullable
- ○
  the request property / became nullable
  request-property-became-nullable
- ○
  the request property / became nullable
  request-property-became-nullable
- ○
  the request property / became nullable
  request-property-became-nullable
- ○
  the request property / became nullable
  request-property-became-nullable
- ○
  the request property / became nullable
  request-property-became-nullable
Sep 8, 2026cb4c6440bd8511See the full diff
- ○
  the request property default value was removed
  request-property-default-value-removed
- ○
  the request property default value 1m was removed
  request-property-default-value-removed
- ○
  the request property default value 10000 was removed
  request-property-default-value-removed
- ○
  the request property default value was removed
  request-property-default-value-removed
- ○
  the request property default value 10 was removed
  request-property-default-value-removed
- ○
  the request property default value 1m was removed
  request-property-default-value-removed
- ○
  the request property default value 3h was removed
  request-property-default-value-removed
- ○
  the request property default value 50000 was removed
  request-property-default-value-removed
- ○
  the request property default value 100000 was removed
  request-property-default-value-removed
- ○
  the request property default value drop was removed
  request-property-default-value-removed
- ○
  the request property default value 15m was removed
  request-property-default-value-removed
Aug 17, 20265be5c88425ac7See the full diff
- ●
  the / request property's maxLength was set to 32
  request-property-max-length-set
- ●
  the // request property's maxLength was set to 2048
  request-property-max-length-set
- ●
  the / request property's maxLength was set to 32
  request-property-max-length-set
- ●
  the // request property's maxLength was set to 2048
  request-property-max-length-set
- ●
  the / request property's maxLength was set to 32
  request-property-max-length-set
- ●
  the / request property's maxLength was set to 32
  request-property-max-length-set
- ●
  the / request property's maxLength was set to 32
  request-property-max-length-set

Of the 176 revisions, 20 have no diff computed.

Full history