Install a package by upload

Server: https://{kibana_url}
  • POST /api/fleet/epm/packages
  • POST /s/{space_id}/api/fleet/epm/packages

Refer to Spaces for more information.

Install a package by uploading a .zip or .tar.gz archive (max 100MB).

Archives that contain Kibana assets requiring additional privileges are subject to a preflight authorization check before the package is installed. Privileges are checked in every space the package will be installed into.

The following asset types require the corresponding Kibana API privilege:

  • security_rule: rules-all
  • security_rule with type machine_learning: rules-all and ml:canCreateJob
  • security_ai_prompt: elasticAssistant

If any required privilege is missing, the request returns 403 and no assets are written. To learn more, refer to Upload an integration to Kibana.

[Required authorization] Route required privileges: integrations-all AND fleet-agent-policies-all.

Responses