Install Kibana alert rule for a package

Server: https://{kibana_url}

POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}/rule_assets
POST /s/{space_id}/api/fleet/epm/packages/{pkgName}/{pkgVersion}/rule_assets

Refer to Spaces for more information.

Install Kibana alert rule assets for a specific package version.

[Required authorization] Route required privileges: integrations-all AND fleet-agent-policies-all.

Path Parameters

Request

force boolean

Responses

Successful response

application/json

Bad Request

application/json

Examples

Install alert rule assets for a specific package version

Request Console 1 / 2 languages

Console Kibana Dev Tools

POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}/rule_assets
{}

curl Shell

curl -X POST "https://{kibana_url}/api/fleet/epm/packages/{pkgName}/{pkgVersion}/rule_assets" \
  -H "kbn-xsrf: true" \
  -H "Content-Type: application/json" \
  -d '{}'

Response

{
  "items": [
    {
      "id": "rule-asset-id-1",
      "type": "security_rule"
    }
  ]
}

{
  "error": "Bad Request",
  "message": "An error message describing what went wrong",
  "statusCode": 400
}

Path Parameters { pkgName , pkgVersion , }

Request

Responses

Path Parameters