Initialize security solution flows

Server: https://{kibana_url}

POST /api/security_solution/initialize

Run one or more Security Solution initialization flows for the current space. Each flow provisions a specific set of assets, for example list indices, security data views, prebuilt detection rules, endpoint protection, AI prompts, or detection rule monitoring assets. Only the requested flows are run, and the response reports a result for each one.

Request

The initialization flows to run.

flows [] enum · min: 1 required: Values: create-list-indices security-data-views init-prebuilt-rules init-endpoint-protection init-ai-prompts init-detection-rule-monitoring

Response

Indicates a successful call. Returns a result for each requested flow.

application/json

Examples

Request Console 1 / 2 languages

Console Kibana Dev Tools

POST /api/security_solution/initialize
{
  "flows": [
    "init-prebuilt-rules",
    "init-endpoint-protection",
    "init-ai-prompts"
  ]
}

curl Shell

curl -X POST "https://{kibana_url}/api/security_solution/initialize" \
  -H "Content-Type: application/json" \
  -d '{
  "flows": [
    "init-prebuilt-rules",
    "init-endpoint-protection",
    "init-ai-prompts"
  ]
}'

Response

{
  "flows": {
    "init-ai-prompts": {
      "payload": {
        "install_status": "installed",
        "name": "security_ai_prompts",
        "version": "8.17.1"
      },
      "status": "ready"
    },
    "init-endpoint-protection": {
      "payload": {
        "install_status": "already_installed",
        "name": "endpoint",
        "version": "8.17.1"
      },
      "status": "ready"
    },
    "init-prebuilt-rules": {
      "payload": {
        "install_status": "installed",
        "name": "security_detection_engine",
        "version": "8.17.1"
      },
      "status": "ready"
    }
  }
}