---
type: api
title: Initialize security solution flows
description: **Spaces method and path for this operation:**
url: https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana-serverless/operation/operation-initializesecuritysolution
resource: https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana-serverless/operation/operation-initializesecuritysolution
products:
  - Kibana
---

# Initialize security solution flows

- Server: `https://{kibana_url}`

## Paths

- `POST` `/api/security_solution/initialize`
- `POST` `/s/{space_id}/api/security_solution/initialize`

- [Api key auth](/elastic/docs-builder/docs/4371/api/doc/kibana-serverless/authentication#apikeyauth)

## Description

Refer to [Spaces](https://www.elastic.co/docs/deploy-manage/manage-spaces) for more information.

Run one or more Security Solution initialization flows for the current space.
Each flow provisions a specific set of assets, for example list indices,
security data views, prebuilt detection rules, endpoint protection, AI prompts,
or detection rule monitoring assets. Only the requested flows are run, and the
response reports a result for each one.

## Request Body

`application/json`

The initialization flows to run.

- `flows` ([] enum  · min: 1) — required
  Values: `create-list-indices`, `security-data-views`, `init-prebuilt-rules`, `init-endpoint-protection`, `init-ai-prompts`, `init-detection-rule-monitoring`

## Response

Indicates a successful call. Returns a result for each requested flow.

`application/json`

- `flows` ({})
  Per-flow results. Only requested flows appear in the response, so all properties are optional. Each flow is either a typed ready result or an error result.
  - `create-list-indices` (union oneOf)
    - **CreateListIndicesReadyResult**
      - `status` (enum)
        Values: `ready`
    - **InitializationFlowErrorResult**
      - `error` (string) — nullable
      - `status` (enum)
        Values: `error`
  - `init-ai-prompts` (union oneOf)
    - **PackageInstallReadyResult**
      - `payload` (object)
        - `install_status` (string)
          Fleet package installation status (e.g., installed, already_installed).
        - `name` (string)
        - `version` (string)
      - `status` (enum)
        Values: `ready`
    - **InitializationFlowErrorResult**
      - `error` (string) — nullable
      - `status` (enum)
        Values: `error`
  - `init-detection-rule-monitoring` (union oneOf)
    - **InstallDetectionEngineRuleMonitoringAssetsReadyResult**
      - `status` (enum)
        Values: `ready`
    - **InitializationFlowErrorResult**
      - `error` (string) — nullable
      - `status` (enum)
        Values: `error`
  - `init-endpoint-protection` (union oneOf)
    - **PackageInstallReadyResult**
      - `payload` (object)
        - `install_status` (string)
          Fleet package installation status (e.g., installed, already_installed).
        - `name` (string)
        - `version` (string)
      - `status` (enum)
        Values: `ready`
    - **InitializationFlowErrorResult**
      - `error` (string) — nullable
      - `status` (enum)
        Values: `error`
  - `init-prebuilt-rules` (union oneOf)
    - **PackageInstallReadyResult**
      - `payload` (object)
        - `install_status` (string)
          Fleet package installation status (e.g., installed, already_installed).
        - `name` (string)
        - `version` (string)
      - `status` (enum)
        Values: `ready`
    - **InitializationFlowErrorResult**
      - `error` (string) — nullable
      - `status` (enum)
        Values: `error`
  - `security-data-views` (union oneOf)
    - **SecurityDataViewsReadyResult**
      - `payload` (object)
        - `alertDataView` ({})
          - `id` (string)
          - `patternList` ([] string)
          - `title` (string)
        - `attackDataView` ({})
          - `id` (string)
          - `patternList` ([] string)
          - `title` (string)
        - `defaultDataView` ({})
          - `id` (string)
          - `patternList` ([] string)
          - `title` (string)
        - `kibanaDataViews` ([] object)
          - `id` (string)
          - `patternList` ([] string)
          - `title` (string)
        - `signalIndexName` (string)
      - `status` (enum)
        Values: `ready`
    - **InitializationFlowErrorResult**
      - `error` (string) — nullable
      - `status` (enum)
        Values: `error`
## Code Examples

#### Console

```console
POST /api/security_solution/initialize
{
  "flows": [
    "init-prebuilt-rules",
    "init-endpoint-protection",
    "init-ai-prompts"
  ]
}
```

#### curl

```curl
curl -X POST "https://{kibana_url}/api/security_solution/initialize" \
  -H "Content-Type: application/json" \
  -d '{
  "flows": [
    "init-prebuilt-rules",
    "init-endpoint-protection",
    "init-ai-prompts"
  ]
}'
```

## Response Examples

#### Default

```json
{
  "flows": {
    "init-ai-prompts": {
      "payload": {
        "install_status": "installed",
        "name": "security_ai_prompts",
        "version": "8.17.1"
      },
      "status": "ready"
    },
    "init-endpoint-protection": {
      "payload": {
        "install_status": "already_installed",
        "name": "endpoint",
        "version": "8.17.1"
      },
      "status": "ready"
    },
    "init-prebuilt-rules": {
      "payload": {
        "install_status": "installed",
        "name": "security_detection_engine",
        "version": "8.17.1"
      },
      "status": "ready"
    }
  }
}
```