Change Updates

Do not miss any Kibana API changes, ever again

Subscribe to the Kibana API changelog to be up to date on recent changes.

RSS

May 6, 2025

main
1.0.2
Compare

API structure has changed

39 structure changes including:
5 Additions
34 Modifications
Modified 34 Breaking
DELETE /api/detection_engine/rules
  • Response
  • 200 response Modified
    • application/json content type Modified
      • Security_Detections_API_EqlRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_QueryRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_SavedQueryRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_ThresholdRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_ThreatMatchRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_MachineLearningRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_NewTermsRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_EsqlRuleResponseFields alternative Modified
        • execution_summary property Modified
POST /api/alerting/rule/{id}
  • Body
  • application/json content type Modified
    • artifacts property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • artifacts property Added
POST /api/detection_engine/rules
  • Response
  • 200 response Modified
    • application/json content type Modified
      • Security_Detections_API_EqlRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_QueryRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_SavedQueryRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_ThresholdRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_ThreatMatchRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_MachineLearningRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_NewTermsRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_EsqlRuleResponseFields alternative Modified
        • execution_summary property Modified
POST /api/detection_engine/rules/_bulk_action
  • Body
  • application/json content type Modified
    • Security_Detections_API_BulkManualRuleRun alternative Modified
      • run property Modified
        • end_date property Modified
          • Property is now required
            Breaking
  • Response
  • 200 response Modified
    • application/json content type Modified
      • Security_Detections_API_BulkEditActionResponse alternative Modified
        • attributes property Modified
POST /api/fleet/agent_policies
  • Body
  • application/json content type Modified
    • agentless property Modified
      • cloud_connectors property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • agentless property Modified
POST /api/fleet/agent_policies/_bulk_get
  • Response
  • 200 response Modified
    • application/json content type Modified
      • items property Modified
        • agentless property Modified
POST /api/fleet/agent_policies/{agentPolicyId}/copy
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • agentless property Modified
POST /api/fleet/enrollment_api_keys
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • hidden property Added
POST /api/fleet/package_policies
  • Body
  • application/json content type Modified
    • object-1 alternative Modified
      • spaceIds property Added
POST /api/fleet/package_policies/upgrade/dryrun
  • Response
  • 200 response Modified
    • application/json content type Modified
      • diff property Modified
        • object-2 alternative Modified
POST /api/streams/{name}/content/export
  • Body
  • application/json content type Modified
    • description, name, replaced_patterns, version properties Added
    • include property Added
      • object-1, object-2 properties Added
POST /api/streams/{name}/content/import
  • Body
  • multipart/form-data content type Modified
    • include property Added
PUT /api/alerting/rule/{id}
  • Body
  • application/json content type Modified
    • artifacts property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • artifacts property Added
PUT /api/detection_engine/rules
  • Response
  • 200 response Modified
    • application/json content type Modified
      • Security_Detections_API_EqlRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_QueryRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_SavedQueryRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_ThresholdRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_ThreatMatchRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_MachineLearningRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_NewTermsRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_EsqlRuleResponseFields alternative Modified
        • execution_summary property Modified
PUT /api/fleet/agent_policies/{agentPolicyId}
  • Body
  • application/json content type Modified
    • agentless property Modified
      • cloud_connectors property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • agentless property Modified
PUT /api/fleet/agents/{agentId}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • outputs property Modified
PUT /api/fleet/package_policies/{packagePolicyId}
  • Body
  • application/json content type Modified
    • object-1 alternative Modified
      • spaceIds property Added
PUT /api/streams/{name}
  • Body
  • application/json content type Modified
    • object-2, object-2, object-2 alternatives Removed
      • Removing a resource is always breaking unless it was deprecated before
        Breaking
    • object-8, object-8, object-4 alternatives Added
PUT /api/streams/{name}/_group
  • Body
  • application/json content type Modified
    • group property Modified
      • description property Removed
        • Removing a resource is always breaking unless it was deprecated before
          Breaking
PUT /api/streams/{name}/_ingest
  • Body
  • application/json content type Modified
    • property Modified
      • Removing polymorphism is always breaking
        Breaking
GET /api/alerting/rule/{id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • artifacts property Added
GET /api/alerting/rules/_find
  • Response
  • 200 response Modified
    • application/json content type Modified
      • artifacts property Added
GET /api/detection_engine/rules
  • Response
  • 200 response Modified
    • application/json content type Modified
      • Security_Detections_API_EqlRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_QueryRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_SavedQueryRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_ThresholdRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_ThreatMatchRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_MachineLearningRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_NewTermsRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_EsqlRuleResponseFields alternative Modified
        • execution_summary property Modified
GET /api/detection_engine/rules/_find
  • Response
  • 200 response Modified
    • application/json content type Modified
      • data property Modified
        • Security_Detections_API_EqlRuleResponseFields, Security_Detections_API_QueryRuleResponseFields, Security_Detections_API_SavedQueryRuleResponseFields, Security_Detections_API_ThresholdRuleResponseFields, Security_Detections_API_ThreatMatchRuleResponseFields, Security_Detections_API_MachineLearningRuleResponseFields, Security_Detections_API_NewTermsRuleResponseFields, Security_Detections_API_EsqlRuleResponseFields alternatives Modified
GET /api/fleet/agent_policies
  • Response
  • 200 response Modified
    • application/json content type Modified
      • items property Modified
        • agentless property Modified
GET /api/fleet/agent_policies/{agentPolicyId}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • agentless property Modified
GET /api/fleet/agents
  • Response
  • 200 response Modified
    • application/json content type Modified
      • items property Modified
        • outputs property Modified
GET /api/fleet/agents/{agentId}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • outputs property Modified
GET /api/fleet/enrollment_api_keys
  • Response
  • 200 response Modified
    • application/json content type Modified
      • items property Modified
        • hidden property Added
      • list property Modified
        • hidden property Added
GET /api/fleet/enrollment_api_keys/{keyId}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • hidden property Added
GET /api/fleet/remote_synced_integrations/status
  • Response
  • 200 response Modified
    • application/json content type Modified
      • custom_assets property Modified
        • * property Modified
GET /api/fleet/remote_synced_integrations/{outputId}/remote_status
  • Response
  • 200 response Modified
    • application/json content type Modified
      • custom_assets property Modified
        • * property Modified
GET /api/synthetics/monitors
  • Query
  • useLogicalAndFor query parameter Added
PATCH /api/detection_engine/rules
  • Response
  • 200 response Modified
    • application/json content type Modified
      • Security_Detections_API_EqlRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_QueryRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_SavedQueryRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_ThresholdRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_ThreatMatchRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_MachineLearningRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_NewTermsRuleResponseFields alternative Modified
        • execution_summary property Modified
      • Security_Detections_API_EsqlRuleResponseFields alternative Modified
        • execution_summary property Modified
Added 5
PUT /api/fleet/epm/custom_integrations/{pkgName}
POST /s/{spaceId}/api/observability/slos/_bulk_purge_rollup
POST /s/{spaceId}/api/observability/slos/_bulk_delete
GET /s/{spaceId}/api/observability/slos/_bulk_delete/{taskId}
GET /api/fleet/agent_policies/{agentPolicyId}/auto_upgrade_agents_status