---
type: api
title: Security timeline
description: You can create Timelines and Timeline templates via the API, as well as import new Timelines from an ndjson file.
url: https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/group/endpoint-security-timeline-api
resource: https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/group/endpoint-security-timeline-api
products:
  - Kibana
---

# Security timeline

`Security Timeline API`

You can create Timelines and Timeline templates via the API, as well as import new Timelines from an ndjson file.

- [Delete one or more notes](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-deletenote): `DELETE` `/api/note`, `DELETE` `/s/{space_id}/api/note`
- [Get notes](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-getnotes): `GET` `/api/note`, `GET` `/s/{space_id}/api/note`
- [Add or update a note](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-persistnoteroute): `PATCH` `/api/note`, `PATCH` `/s/{space_id}/api/note`
- [Pin/unpin an event](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-persistpinnedeventroute): `PATCH` `/api/pinned_event`, `PATCH` `/s/{space_id}/api/pinned_event`
- [Delete Timelines or Timeline templates](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-deletetimelines): `DELETE` `/api/timeline`, `DELETE` `/s/{space_id}/api/timeline`
- [Get Timeline or Timeline template details](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-gettimeline): `GET` `/api/timeline`, `GET` `/s/{space_id}/api/timeline`
- [Update a Timeline](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-patchtimeline): `PATCH` `/api/timeline`, `PATCH` `/s/{space_id}/api/timeline`
- [Create a Timeline or Timeline template](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-createtimelines): `POST` `/api/timeline`, `POST` `/s/{space_id}/api/timeline`
- [Copies timeline or timeline template](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-copytimeline): `POST` `/api/timeline/_copy`, `POST` `/s/{space_id}/api/timeline/_copy`
- [Get draft Timeline or Timeline template details](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-getdrafttimelines): `GET` `/api/timeline/_draft`, `GET` `/s/{space_id}/api/timeline/_draft`
- [Create a clean draft Timeline or Timeline template](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-cleandrafttimelines): `POST` `/api/timeline/_draft`, `POST` `/s/{space_id}/api/timeline/_draft`
- [Export Timelines](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-exporttimelines): `POST` `/api/timeline/_export`, `POST` `/s/{space_id}/api/timeline/_export`
- [Favorite a Timeline or Timeline template](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-persistfavoriteroute): `PATCH` `/api/timeline/_favorite`, `PATCH` `/s/{space_id}/api/timeline/_favorite`
- [Import Timelines](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-importtimelines): `POST` `/api/timeline/_import`, `POST` `/s/{space_id}/api/timeline/_import`
- [Install prepackaged Timelines](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-installprepackedtimelines): `POST` `/api/timeline/_prepackaged`, `POST` `/s/{space_id}/api/timeline/_prepackaged`
- [Resolve a Timeline or Timeline template](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-resolvetimeline): `GET` `/api/timeline/resolve`, `GET` `/s/{space_id}/api/timeline/resolve`
- [Get Timelines or Timeline templates](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-gettimelines): `GET` `/api/timelines`, `GET` `/s/{space_id}/api/timelines`