---
title: stack es ml update-job cli command
description: Update an anomaly detection job. Behaviour flags: --dry-run — validate all inputs and exit without performing any action 
url: https://www.elastic.co/elastic/docs-builder/docs/4075/reference/elastic-cli/cli/stack/es/ml/update-job
applies_to:
  - Elastic Cloud Serverless: Preview
  - Elastic Stack: Preview
---

# stack es ml update-job cli command
<cli-modifiers>
</cli-modifiers>

```bash
elastic stack es ml update-job --job-id <job-id> [options]
```

Update an anomaly detection job.
**Behaviour flags:**
`--dry-run` — validate all inputs and exit without performing any action

## Options

<definitions>
  <definition term="--job-id string required">
    Identifier for the job.
  </definition>
  <definition term="--allow-lazy-open">
    Advanced configuration option. Specifies whether this job can open when
    there is insufficient machine learning node capacity for it to be
    immediately assigned to a node. If `false` and a machine learning node
    with capacity to run the job cannot immediately be found, the open
    anomaly detection jobs API returns an error. However, this is also
    subject to the cluster-wide `xpack.ml.max_lazy_ml_nodes` setting. If this
    option is set to `true`, the open anomaly detection jobs API does not
    return an error and the job waits in the opening state until sufficient
    machine learning node capacity is available.
  </definition>
  <definition term="--analysis-limits string">
  </definition>
  <definition term="--background-persist-interval string">
    Advanced configuration option. The time between each periodic persistence
    of the model.
    The default value is a randomized value between 3 to 4 hours, which
    avoids all jobs persisting at exactly the same time. The smallest allowed
    value is 1 hour.
    For very large models (several GB), persistence could take 10-20 minutes,
    so do not set the value too low.
    If the job is open when you make the update, you must stop the datafeed,
    close the job, then reopen the job and restart the datafeed for the
    changes to take effect.
  </definition>
  <definition term="--custom-settings string">
    Advanced configuration option. Contains custom meta data about the job.
    For example, it can contain custom URL information as shown in Adding
    custom URLs to machine learning results.
  </definition>
  <definition term="--categorization-filters string[]">
    **Repeatable:** pass `--categorization-filters` multiple times to supply more than one value
  </definition>
  <definition term="--description string">
    A description of the job.
  </definition>
  <definition term="--model-plot-config string">
  </definition>
  <definition term="--model-prune-window string">
  </definition>
  <definition term="--daily-model-snapshot-retention-after-days number">
    Advanced configuration option, which affects the automatic removal of old
    model snapshots for this job. It specifies a period of time (in days)
    after which only the first snapshot per day is retained. This period is
    relative to the timestamp of the most recent snapshot for this job. Valid
    values range from 0 to `model_snapshot_retention_days`. For jobs created
    before version 7.8.0, the default value matches
    `model_snapshot_retention_days`.
  </definition>
  <definition term="--model-snapshot-retention-days number">
    Advanced configuration option, which affects the automatic removal of old
    model snapshots for this job. It specifies the maximum period of time (in
    days) that snapshots are retained. This period is relative to the
    timestamp of the most recent snapshot for this job.
  </definition>
  <definition term="--renormalization-window-days number">
    Advanced configuration option. The period over which adjustments to the
    score are applied, as new data is seen.
  </definition>
  <definition term="--results-retention-days number">
    Advanced configuration option. The period of time (in days) that results
    are retained. Age is calculated relative to the timestamp of the latest
    bucket result. If this property has a non-null value, once per day at
    00:30 (server time), results that are the specified number of days older
    than the latest bucket result are deleted from Elasticsearch. The default
    value is null, which means all results are retained.
  </definition>
  <definition term="--groups string[]">
    A list of job groups. A job can belong to no groups or many.
    **Repeatable:** pass `--groups` multiple times to supply more than one value
  </definition>
  <definition term="--detectors string[]">
    An array of detector update objects.
    **Repeatable:** pass `--detectors` multiple times to supply more than one value
  </definition>
  <definition term="--per-partition-categorization string">
    Settings related to how categorization interacts with partition fields.
  </definition>
  <definition term="--error-trace">
    When set to `true` Elasticsearch will include the full stack trace of errors
    when they occur.
  </definition>
  <definition term="--filter-path string">
    Comma-separated list of filters in dot notation which reduce the response
    returned by Elasticsearch.
    **Repeatable:** pass `--filter-path` multiple times to supply more than one value
  </definition>
  <definition term="--human">
    When set to `true` will return statistics in a format suitable for humans.
    For example `"exists_time": "1h"` for humans and
    `"exists_time_in_millis": 3600000` for computers. When disabled the human
    readable values will be omitted. This makes sense for responses being consumed
    only by machines.
  </definition>
  <definition term="--pretty">
    If set to `true` the returned JSON will be "pretty-formatted". Only use
    this option for debugging only.
  </definition>
  <definition term="--input-file string">
    path to a JSON file to use as command input
  </definition>
  <definition term="--dry-run">
    validate all inputs and exit without performing any action (preview changes without applying them)
  </definition>
</definitions>


## Global Options

<definitions>
  <definition term="--json">
    output as JSON
  </definition>
</definitions>