APIs
  • Kibana APIs
    Back to hub Cloud Billing API Elastic Cloud API Elastic Cloud Connected API Elastic Cloud Enterprise API Elastic Cloud Serverless API Elasticsearch API Elasticsearch Serverless API Kibana APIs Kibana Serverless APIs Logstash APIs
  • Download source
    JSON YAML
  1. APIs /
  2. Kibana APIs

Elastic Agent status

View as Markdown

Enables you to retrieve status information about Elastic Agents, including health summaries and operational status.

1 endpoint

  • Get an agent status summary
    • GET /api/fleet/agent_status
v0
latest v9 v8 v0
  • Spaces
  • Authentication
  • Servers
  • Agent Builder
    • Send A2A task POST
    • Get A2A agent card GET
    • List agents GET
    • Create an agent POST
    • Get agent consumption data POST
    • Delete an agent DELETE
    • Get an agent by ID GET
    • Update an agent PUT
    • Get an agent's access control list GET
    • Update an agent's access control list PUT
    • List conversations GET
    • Create conversation POST
    • Delete conversation by ID DELETE
    • Get conversation by ID GET
    • Add events to a conversation POST
    • Update a conversation's access control PUT
    • List conversation attachments GET
    • Create conversation attachment POST
    • Delete conversation attachment DELETE
    • Get conversation attachment GET
    • Rename attachment PATCH
    • Update conversation attachment PUT
    • Restore deleted attachment POST
    • Update attachment origin PUT
    • Check attachment staleness GET
    • Send chat message POST
    • Send chat message (streaming) POST
    • MCP server POST
    • List plugins GET
    • Delete a plugin DELETE
    • Get a plugin by id GET
    • Install a plugin POST
    • List skills GET
    • Create a skill POST
    • Delete a skill DELETE
    • Get a skill by id GET
    • Update a skill PUT
    • List tools GET
    • Create a tool POST
    • Run a tool POST
    • Delete a tool DELETE
    • Get a tool by id GET
    • Update a tool PUT
  • Alerting
    • Get the alerting framework health GET
    • Get the rule types GET
    • Delete a rule DELETE
    • Get rule details GET
    • Create a rule POST
    • Update a rule PUT
    • Disable a rule POST
    • Enable a rule POST
    • Mute all alerts POST
    • Unmute all alerts POST
    • Update the API key for a rule POST
    • Get the Elasticsearch query for a rule GET
    • Schedule a snooze for the rule POST
    • Mute an alert POST
    • Snooze an alert POST
    • Unmute an alert POST
    • Unsnooze an alert POST
    • Delete a snooze schedule for a rule DELETE
    • Get information about rules GET
    • Find backfills for rules POST
    • Schedule a backfill for rules POST
    • Delete a backfill by ID DELETE
    • Get a backfill by ID GET
  • Alerting V2
    • List action policies GET
    • Create an action policy POST
    • Delete action policies in bulk by ID POST
    • Disable action policies in bulk by ID POST
    • Enable action policies in bulk by ID POST
    • Snooze action policies in bulk by ID POST
    • Cancel snooze for action policies in bulk by ID POST
    • Rotate API keys for action policies in bulk by ID POST
    • Delete an action policy DELETE
    • Get an action policy GET
    • Partially update an action policy. PATCH
    • Create or replace an action policy PUT
    • Disable an action policy POST
    • Enable an action policy POST
    • Snooze an action policy POST
    • Unsnooze an action policy POST
    • Update an action policy API key POST
    • Bulk acknowledge alert episodes POST
    • Bulk activate alert episodes POST
    • Bulk assign alert episodes POST
    • Bulk deactivate alert episodes POST
    • Bulk tag alert episodes POST
    • Bulk unacknowledge alert episodes POST
    • Acknowledge an alert episode POST
    • Activate an alert episode POST
    • Assign an alert episode to a user POST
    • Deactivate an alert episode POST
    • Tag an alert episode POST
    • Unacknowledge an alert episode POST
    • List action policy executions GET
    • List rule executions GET
    • List rules GET
    • Create a rule POST
    • Create rules in bulk POST
    • Delete rules in bulk by ID POST
    • Disable rules in bulk by ID POST
    • Enable rules in bulk by ID POST
    • Get rules in bulk POST
    • Update the API key of rules in bulk by ID POST
    • Delete rules matching a query (dry-run by default) POST
    • Disable rules matching a query (dry-run by default) POST
    • Enable rules matching a query (dry-run by default) POST
    • Update the API key of rules matching a query (dry-run by default) POST
    • Delete a rule DELETE
    • Get a rule GET
    • Update a rule PATCH
    • Create or replace a rule PUT
    • Disable a rule POST
    • Enable a rule POST
    • Run a rule now POST
    • Bulk snooze alert episode series POST
    • Bulk unsnooze alert episode series POST
    • Snooze an alert episode series POST
    • Unsnooze an alert episode series POST
  • APM agent configuration
    • Delete agent configuration DELETE
    • Get a list of agent configurations GET
    • Create or update agent configuration PUT
    • Get agent name for service GET
    • Get environments for service GET
    • Lookup single agent configuration POST
    • Get single agent configuration GET
  • APM agent keys
    • Create an APM agent key POST
  • APM annotations
    • Create a service annotation POST
    • Search for annotations GET
  • APM server schema
    • Save APM server schema POST
  • APM sourcemaps
    • Get source maps GET
    • Upload a source map POST
    • Delete source map DELETE
  • Cases
    • Delete cases DELETE
    • Update cases PATCH
    • Create a case POST
    • Search cases GET
    • Get case information GET
    • Get all alerts for a case GET
    • Delete all case comments and alerts DELETE
    • Update a case comment or alert PATCH
    • Add a case comment or alert POST
    • Find case comments GET
    • Delete a case comment or alert DELETE
    • Get a case comment or alert GET
    • Push a case to an external service POST
    • Get the fields applicable to an existing case GET
    • Attach a file to a case POST
    • Find case activity GET
    • Get cases for an alert GET
    • Get case settings GET
    • Add case settings POST
    • Update case settings PATCH
    • Get case connectors GET
    • Get the fields applicable to a case GET
    • Get case creators GET
    • Get case tags GET
    • Get all case templates GET
    • Create a case template POST
    • Delete a case template DELETE
    • Get a case template by ID GET
    • Update a case template PUT
  • Connectors
    • Get connector types GET
    • Handle OAuth callback GET
    • Start OAuth authorization (redirects to the identity provider) GET
    • Delete a connector DELETE
    • Get connector information GET
    • Create a connector POST
    • Update a connector PUT
    • Run a connector POST
    • Get all connectors GET
  • Dashboards
    • When to use this API
    • Get started
    • Try it now
    • Dashboard structure
    • Panel types
    • Embedding library items
    • ES|QL visualizations
    • Search dashboards GET
    • Create a dashboard POST
    • Delete a dashboard DELETE
    • Get a dashboard GET
    • Upsert a dashboard PUT
  • Data streams
    • Get data streams GET
    • Get data streams GET
    • Check if data streams have data GET
  • Data views
    • Get all data views GET
    • Create a data view POST
    • Delete a data view DELETE
    • Get a data view GET
    • Update a data view POST
    • Update field metadata POST
    • Create a runtime field POST
    • Create or update a runtime field PUT
    • Delete a runtime field DELETE
    • Get a runtime field GET
    • Update a runtime field POST
    • Get the default data view GET
    • Set the default data view POST
    • Swap saved object references POST
    • Preview swap references POST
  • Elastic Agent actions
    • Create an agent action POST
    • Reassign an agent POST
    • Remove an OpAMP collector POST
    • Request agent diagnostics POST
    • Rollback an agent POST
    • Unenroll an agent POST
    • Upgrade an agent POST
    • Get an agent action status GET
    • Cancel an agent action POST
    • Bulk reassign agents POST
    • Bulk remove OpAMP collectors POST
    • Bulk request diagnostics from agents POST
    • Bulk rollback agents POST
    • Bulk unenroll agents POST
    • Bulk update agent tags POST
    • Bulk upgrade agents POST
  • Elastic Agent binary download sources
    • Get agent binary download sources GET
    • Create an agent binary download source POST
    • Delete an agent binary download source DELETE
    • Get an agent binary download source GET
    • Update an agent binary download source PUT
  • Elastic Agent policies
    • Get agent policies GET
    • Create an agent policy POST
    • Bulk get agent policies POST
    • Get an agent policy GET
    • Update an agent policy PUT
    • Get auto upgrade agent status GET
    • Copy an agent policy POST
    • Download an agent policy GET
    • Get a full agent policy GET
    • Get outputs for an agent policy GET
    • Delete an agent policy POST
    • Get outputs for agent policies POST
    • Get a full K8s agent manifest GET
    • Download an agent manifest GET
  • Elastic Agent status
    • Get an agent status summary GET
  • Elastic Agents
    • Get incoming agent data GET
    • Get agents GET
    • Get agents by action ids POST
    • Delete an agent DELETE
    • Get an agent GET
    • Update an agent by ID PUT
    • Get an agent's effective config GET
    • Migrate a single agent POST
    • Change agent privilege level POST
    • Get agent uploads GET
    • Get available agent versions GET
    • Migrate multiple agents POST
    • Bulk change agent privilege level POST
    • Delete an uploaded file DELETE
    • Get an uploaded file GET
    • Get agent setup info GET
    • Initiate Fleet setup POST
    • Get agent tags GET
  • Elastic Package Manager (EPM)
    • Bulk get assets POST
    • Get package categories GET
    • Create a custom integration POST
    • Update a custom integration PUT
    • Get packages GET
    • Install a package by upload POST
    • Bulk install packages POST
    • Bulk enable/disable namespace-level customization for packages POST
    • Bulk rollback packages POST
    • Get Bulk rollback packages details GET
    • Bulk uninstall packages POST
    • Get Bulk uninstall packages details GET
    • Bulk upgrade packages POST
    • Get Bulk upgrade packages details GET
    • Delete a package DELETE
    • Get a package GET
    • Install a package from the registry POST
    • Update package settings PUT
    • Get a package file GET
    • Delete assets for a package DELETE
    • Get package dependencies GET
    • Delete Kibana assets for a package DELETE
    • Install Kibana assets for a package POST
    • Install Kibana alert rule for a package POST
    • Authorize transforms POST
    • Review a pending policy upgrade for a package with deprecations POST
    • Rollback a package to previous version POST
    • Get package stats GET
    • Get installed packages GET
    • Get a limited package list GET
    • Get an inputs template GET
    • Get a package signature verification key ID GET
  • Fleet agentless policies
    • Deprecated: Get managed integrations GET
    • Deprecated: Create a managed integration POST
    • Deprecated: Bulk upgrade managed integrations POST
    • Deprecated: Preview a managed integrations upgrade POST
    • Deprecated: Delete a managed integration DELETE
    • Deprecated: Get a managed integration GET
    • Deprecated: Update a managed integration PUT
  • Fleet cloud connectors
    • Get cloud connectors GET
    • Create cloud connector POST
    • Delete cloud connector (supports force deletion) DELETE
    • Get cloud connector GET
    • Update cloud connector PUT
    • Get cloud connector usage (package policies using the connector) GET
  • Fleet cloud onboarding deployments
    • Create cloud onboarding deployment POST
    • Delete cloud onboarding deployment DELETE
    • Get cloud onboarding deployment GET
    • Update cloud onboarding deployment PUT
    • Get cloud onboarding deployments by connector ID GET
  • Fleet enrollment API keys
    • Get enrollment API keys GET
    • Create an enrollment API key POST
    • Bulk revoke or delete enrollment API keys POST
    • Revoke or delete an enrollment API key DELETE
    • Get an enrollment API key GET
  • Fleet internals
    • Check permissions GET
    • Check Fleet Server health POST
    • Get settings GET
    • Update settings PUT
    • Initiate Fleet setup POST
    • Get space settings GET
    • Create space settings PUT
  • Fleet managed integrations
    • Get managed integrations GET
    • Create a managed integration POST
    • Bulk upgrade managed integrations POST
    • Preview a managed integrations upgrade POST
    • Delete a managed integration DELETE
    • Get a managed integration GET
    • Update a managed integration PUT
  • Fleet Message Signing Service
    • Rotate a Fleet message signing key pair POST
  • Fleet outputs
    • Generate a Logstash API key POST
    • Get outputs GET
    • Create output POST
    • Delete output DELETE
    • Get output GET
    • Update output PUT
    • Get the latest output health GET
  • Fleet package policies
    • Get package policies GET
    • Create a package policy POST
    • Bulk get package policies POST
    • Delete a package policy DELETE
    • Get a package policy GET
    • Update a package policy PUT
    • Bulk delete package policies POST
    • Upgrade a package policy POST
    • Dry run a package policy upgrade POST
  • Fleet proxies
    • Get proxies GET
    • Create a proxy POST
    • Delete a proxy DELETE
    • Get a proxy GET
    • Update a proxy PUT
  • Fleet remote synced integrations
    • Get remote synced integrations status by outputId GET
    • Get remote synced integrations status GET
  • Fleet Server hosts
    • Get Fleet Server hosts GET
    • Create a Fleet Server host POST
    • Delete a Fleet Server host DELETE
    • Get a Fleet Server host GET
    • Update a Fleet Server host PUT
  • Fleet service tokens
    • Create a service token POST
  • Fleet uninstall tokens
    • Get metadata for latest uninstall tokens GET
    • Rotate an uninstall token POST
    • Get a decrypted uninstall token GET
  • Links
    • List links library items GET
    • Create a links library item POST
    • Delete a links library item DELETE
    • Get a links library item by ID GET
    • Upsert links library item PUT
  • Logstash configuration management
    • Delete a Logstash pipeline DELETE
    • Get a Logstash pipeline GET
    • Create or update a Logstash pipeline PUT
    • Get all Logstash pipelines GET
  • Machine learning
    • Sync saved objects in the default space GET
    • Update jobs spaces POST
    • Update trained models spaces POST
  • Maintenance windows
    • Create a maintenance window. POST
    • Search for a maintenance window. GET
    • Delete a maintenance window. DELETE
    • Get maintenance window details. GET
    • Update a maintenance window. PATCH
    • Archive a maintenance window. POST
    • Unarchive a maintenance window. POST
  • Markdowns
    • List markdown library items GET
    • Create a markdown library item POST
    • Delete a markdown library item DELETE
    • Get a markdown library item by ID GET
    • Upsert a markdown library item PUT
  • Observability AI Assistant
    • Generate a chat completion POST
  • Roles
    • Get all roles GET
    • Delete a role DELETE
    • Get a role GET
    • Create or update a role PUT
    • Create or update roles POST
  • Saved objects
    • Rotate a key for encrypted saved objects POST
    • Create saved objects POST
    • Delete saved objects POST
    • Get saved objects POST
    • Resolve saved objects POST
    • Update saved objects PUT
    • Export saved objects POST
    • Search for saved objects GET
    • Import saved objects POST
    • Resolve import errors POST
    • Create a saved object POST
    • Delete a saved object DELETE
    • Get a saved object GET
    • Update a saved object PUT
    • Resolve a saved object GET
  • Security AI assistant
    • Apply a bulk action to anonymization fields POST
    • Get anonymization fields GET
    • Create a model response POST
    • Delete conversations DELETE
    • Create a conversation POST
    • Get conversations GET
    • Delete a conversation DELETE
    • Get a conversation GET
    • Update a conversation PUT
    • Read a KnowledgeBase GET
    • Create a KnowledgeBase POST
    • Read a KnowledgeBase for a resource GET
    • Create a KnowledgeBase for a resource POST
    • Create a Knowledge Base Entry POST
    • Applies a bulk action to multiple Knowledge Base Entries POST
    • Finds Knowledge Base Entries that match the given query. GET
    • Deletes a single Knowledge Base Entry using the `id` field DELETE
    • Read a Knowledge Base Entry GET
    • Update a Knowledge Base Entry PUT
    • Apply a bulk action to prompts POST
    • Get prompts GET
  • Security Attack discovery
    • Bulk update Attack discoveries POST
    • Find Attack discoveries that match the search criteria GET
    • Generate attack discoveries from alerts POST
    • Get the latest Attack Discovery generations metadata for the current user GET
    • Get a single Attack Discovery generation, including its discoveries and (optional) generation metadata GET
    • Dismiss an Attack Discovery generation POST
    • Create Attack Discovery schedule POST
    • Bulk delete Attack Discovery schedules POST
    • Bulk disable Attack Discovery schedules POST
    • Bulk enable Attack Discovery schedules POST
    • Find Attack Discovery schedules that match the search criteria GET
    • Delete Attack Discovery schedule DELETE
    • Get Attack Discovery schedule by ID GET
    • Update Attack Discovery schedule PUT
    • Disable Attack Discovery schedule POST
    • Enable Attack Discovery schedule POST
  • Security detections
    • Assign and unassign users from attack discovery alerts POST
    • Find and/or aggregate attack discovery alerts POST
    • Set attack discovery alerts workflow status POST
    • Add and remove attack discovery alert tags POST
    • Delete an alerts index DELETE
    • Reads the alert index name if it exists GET
    • Create an alerts index POST
    • Returns user privileges for the Kibana space GET
    • Delete a detection rule DELETE
    • Retrieve a detection rule GET
    • Patch a detection rule PATCH
    • Create a detection rule POST
    • Update a detection rule PUT
    • Apply a bulk action to detection rules POST
    • Export detection rules POST
    • List all detection rules GET
    • Import detection rules POST
    • Install prebuilt detection rules and Timelines PUT
    • Retrieve the status of prebuilt detection rules and Timelines GET
    • Preview rule alerts generated on specified time range POST
    • Assign and unassign users from detection alerts POST
    • Finalize detection alert migrations POST
    • Clean up detection alert migrations DELETE
    • Initiate a detection alert migration POST
    • Retrieve the status of detection alert migrations GET
    • Find and/or aggregate detection alerts POST
    • Set a detection alert status POST
    • Add and remove detection alert tags POST
    • List all detection rule tags GET
  • Security Elastic Endpoint exceptions
    • Create an Elastic Endpoint rule exception list POST
    • Delete an Elastic Endpoint exception list item DELETE
    • Get an Elastic Endpoint rule exception list item GET
    • Create an Elastic Endpoint rule exception list item POST
    • Update an Elastic Endpoint rule exception list item PUT
    • Get Elastic Endpoint exception list items GET
  • Security endpoint management
    • Get response actions GET
    • Get response actions status GET
    • Get action details GET
    • Get file information GET
    • Download a file GET
    • Cancel a response action POST
    • Run a command POST
    • Get a file POST
    • Isolate an endpoint POST
    • Terminate a process POST
    • Generate a memory dump from the host machine POST
    • Run a script POST
    • Get running processes POST
    • Scan a file or directory POST
    • Get actions state GET
    • Suspend a process POST
    • Release an isolated endpoint POST
    • Upload a file POST
    • Get a metadata list GET
    • Get metadata GET
    • Get a policy response GET
    • Get a protection updates note GET
    • Create or update a protection updates note POST
    • Get a list of scripts GET
    • Create script POST
    • Delete a script DELETE
    • Get script GET
    • Update script PATCH
    • Download a script file GET
  • Security entity analytics
    • Delete an asset criticality record DELETE
    • Get an asset criticality record GET
    • Upsert an asset criticality record POST
    • Bulk upsert asset criticality records POST
    • List asset criticality records GET
    • Delete the Privilege Monitoring Engine DELETE
    • Disable the Privilege Monitoring Engine POST
    • Initialize the Privilege Monitoring Engine POST
    • Schedule the Privilege Monitoring Engine POST
    • Health check on Privilege Monitoring GET
    • Run a privileges check on Privilege Monitoring GET
    • Create a new monitored user POST
    • Upsert multiple monitored users via CSV upload POST
    • Delete a monitored user DELETE
    • Update a monitored user PUT
    • List all monitored users GET
    • Installs the privileged access detection package for the Entity Analytics privileged user monitoring experience POST
    • Gets the status of the privileged access detection package for the Entity Analytics privileged user monitoring experience GET
    • Create a new watchlist POST
    • Get a watchlist by ID GET
    • Update an existing watchlist PUT
    • Upload a CSV file to add entities to a watchlist POST
    • Manually assign entities to a watchlist POST
    • Manually unassign entities from a watchlist POST
    • List all watchlists GET
    • Cleanup the Risk Engine DELETE
    • Configure the Risk Engine Saved Object PATCH
    • Run the risk scoring engine POST
    • Get risk score history for an entity GET
  • Security entity store
    • Update the Entity Store PUT
    • List entities GET
    • Delete an entity DELETE
    • Create an entity POST
    • Update an entity PUT
    • Bulk update entities PUT
    • Disable the history snapshot task PUT
    • Enable the history snapshot task PUT
    • Install the Entity Store POST
    • Get resolution group GET
    • Link entities POST
    • List entity resolution rules GET
    • Disable an entity resolution rule PUT
    • Enable an entity resolution rule PUT
    • Unlink entities POST
    • Start Entity Store engines PUT
    • Get Entity Store status GET
    • Stop Entity Store engines PUT
    • Uninstall the Entity Store POST
  • Security exceptions
    • Exceptions requirements
    • Create rule exception items POST
    • Delete an exception list DELETE
    • Get exception list details GET
    • Create an exception list POST
    • Update an exception list PUT
    • Duplicate an exception list POST
    • Export an exception list POST
    • Get exception lists GET
    • Import an exception list POST
    • Delete an exception list item DELETE
    • Get an exception list item GET
    • Create an exception list item POST
    • Update an exception list item PUT
    • Get exception list items GET
    • Get an exception list summary GET
    • Create a shared exception list POST
  • Security lists
    • Lists requirements
    • Delete a value list DELETE
    • Get value list details GET
    • Patch a value list PATCH
    • Create a value list POST
    • Update a value list PUT
    • Get value lists GET
    • Delete value list data streams DELETE
    • Get status of value list data streams GET
    • Create list data streams POST
    • Delete a value list item DELETE
    • Get a value list item GET
    • Patch a value list item PATCH
    • Create a value list item POST
    • Update a value list item PUT
    • Export value list items POST
    • Get value list items GET
    • Import value list items POST
    • Get value list privileges GET
  • Security Osquery
    • Get unified query history GET
    • Get live queries GET
    • Create a live query POST
    • Get live query details GET
    • Get live query results GET
    • Export live query results POST
    • Get packs GET
    • Create a pack POST
    • Delete a pack DELETE
    • Get pack details GET
    • Update a pack PUT
    • Copy a pack POST
    • Get saved queries GET
    • Create a saved query POST
    • Delete a saved query DELETE
    • Get saved query details GET
    • Update a saved query PUT
    • Copy a saved query POST
    • Get scheduled action results GET
    • Export scheduled query results POST
    • Get scheduled query results GET
  • Security solution initialization
    • Initialize security solution flows POST
  • Security timeline
    • Delete one or more notes DELETE
    • Get notes GET
    • Add or update a note PATCH
    • Pin/unpin an event PATCH
    • Delete Timelines or Timeline templates DELETE
    • Get Timeline or Timeline template details GET
    • Update a Timeline PATCH
    • Create a Timeline or Timeline template POST
    • Copies timeline or timeline template POST
    • Get draft Timeline or Timeline template details GET
    • Create a clean draft Timeline or Timeline template POST
    • Export Timelines POST
    • Favorite a Timeline or Timeline template PATCH
    • Import Timelines POST
    • Install prepackaged Timelines POST
    • Resolve a Timeline or Timeline template GET
    • Get Timelines or Timeline templates GET
  • Service level objectives
    • Get a paginated list of SLOs GET
    • Create an SLO POST
    • Bulk delete SLO definitions and their associated summary and rollup data. POST
    • Retrieve the status of the bulk deletion GET
    • Batch delete rollup and summary data POST
    • Batch delete rollup and summary data POST
    • Compute SLO instance summaries in bulk at a point in time POST
    • Delete an SLO DELETE
    • Get an SLO GET
    • Update an SLO PUT
    • Reset an SLO POST
    • Compute an SLO instance summary at a point in time GET
    • Disable an SLO POST
    • Enable an SLO POST
    • Get the SLO definitions GET
  • Short URLs
    • Create a short URL POST
    • Resolve a short URL GET
    • Delete a short URL DELETE
    • Get a short URL GET
  • Spaces
    • Copy saved objects between spaces POST
    • Disable legacy URL aliases POST
    • Get shareable references POST
    • Update saved objects in spaces POST
    • Get all spaces GET
    • Create a space POST
    • Delete a space DELETE
    • Get a space GET
    • Update a space PUT
  • Streams
    • Get stream list GET
    • Disable streams POST
    • Enable streams POST
    • Resync streams POST
    • Delete a stream DELETE
    • Get a stream GET
    • Create or update a stream PUT
    • Fork a stream POST
    • Get ingest stream settings GET
    • Update ingest stream settings PUT
    • Get query stream settings GET
    • Upsert query stream settings PUT
    • Export stream content POST
    • Import content into a stream POST
    • Get stream attachments GET
    • Bulk update attachments POST
    • Unlink an attachment from a stream DELETE
    • Link an attachment to a stream PUT
  • Synthetics
    • Trigger an on-demand test run for a monitor POST
    • Get monitors GET
    • Create a monitor POST
    • Delete monitors POST
    • Bulk update monitors PUT
    • Delete a monitor DELETE
    • Get a monitor GET
    • Update a monitor PUT
    • Get parameters GET
    • Add parameters POST
    • Delete parameters POST
    • Delete a parameter DELETE
    • Get a parameter GET
    • Update a parameter PUT
    • Get private locations GET
    • Create a private location POST
    • Delete a private location DELETE
    • Get a private location GET
    • Update a private location PUT
  • System
    • Get features GET
    • Get Kibana's current status GET
  • Tags
    • Search tags GET
    • Create a tag POST
    • Delete a tag DELETE
    • Get a tag GET
    • Upsert a tag PUT
  • Task manager
    • Get the task manager health GET
  • unknown
    • GET
    • Query roles POST
    • Resolve conflicts copying saved objects POST
  • Upgrade assistant
    • Get the upgrade readiness status GET
  • Uptime
    • Get uptime settings GET
    • Update uptime settings PUT
  • User session management
    • Invalidate user sessions POST
  • Visualizations
    • When to use this API
    • Get started
    • Try it now
    • How a visualization is structured
    • Chart types
    • Search visualizations GET
    • Create visualization POST
    • Delete visualization DELETE
    • Get visualization GET
    • Update visualization PUT
  • Workflows
    • Bulk delete workflows DELETE
    • Get workflows GET
    • Bulk create workflows POST
    • Get workflow aggregations GET
    • Get available connectors GET
    • Get a workflow execution GET
    • Cancel a workflow execution POST
    • Get child executions GET
    • Get execution logs GET
    • Resume a workflow execution POST
    • Get a step execution GET
    • Get execution step executions GET
    • Resume a workflow execution from an external link GET
    • Submit external input for a paused workflow execution POST
    • Get the external input form for a paused workflow execution GET
    • Export workflows POST
    • Update a managed workflow PUT
    • Get workflows by IDs POST
    • Get workflow JSON schema GET
    • Get workflow statistics GET
    • Test a workflow step POST
    • Test a workflow POST
    • Create a workflow POST
    • Delete a workflow DELETE
    • Get a workflow GET
    • Update a workflow PUT
    • Clone a workflow POST
    • Run a workflow POST
    • Get workflow executions GET
    • Cancel all active workflow executions POST
    • Get workflow step executions GET
    • Search workflow executions GET
Elastic logo
  • Trademarks
  • Terms of Use
  • Privacy
  • Sitemap

© 2026 Elasticsearch B.V. All Rights Reserved.

This content is available in different formats for convenience only. All original licensing terms apply.

Elasticsearch is a trademark of Elasticsearch B.V., registered in the U.S. and in other countries. Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Notice at Collection | Your Privacy Choices