Invalidate user sessions

Server: https://{kibana_url}

POST /api/security/session/_invalidate

Api key auth Basic auth

Invalidate user sessions that match a query. To use this API, you must be a superuser.

Request

Responses

Indicates a successful call

application/json

403

Indicates that the user may not be authorized to invalidate sessions for other users.

Examples

Run POST api/security/session/_invalidate to invalidate all existing sessions.

Request Console 1 / 2 languages

Console Kibana Dev Tools

POST /api/security/session/_invalidate
{
  "match" : "all"
}

curl Shell

curl -X POST "https://{kibana_url}/api/security/session/_invalidate" \
  -H "kbn-xsrf: true" \
  -H "Content-Type: application/json" \
  -d '{
  "match" : "all"
}'

Response

No example

Run POST api/security/session/_invalidate to invalidate sessions that were created by any SAML authentication provider.

Request Console 1 / 2 languages

Console Kibana Dev Tools

POST api/security/session/_invalidate
{
  "match" : "query",
  "query": {
    "provider" : { "type": "saml" }
  }
}

curl Shell

curl -X POST "https://{kibana_url}/api/security/session/_invalidate" \
  -H "kbn-xsrf: true" \
  -H "Content-Type: application/json" \
  -d '{
  "match" : "query",
  "query": {
    "provider" : { "type": "saml" }
  }
}'

Response

No example

Run POST api/security/session/_invalidate to invalidate sessions that were created by the SAML authentication provider named saml1.

Request Console 1 / 2 languages

Console Kibana Dev Tools

POST api/security/session/_invalidate
{
  "match" : "query",
  "query": {
    "provider" : { "type": "saml", "name": "saml1" }
  }
}

curl Shell

curl -X POST "https://{kibana_url}/api/security/session/_invalidate" \
  -H "kbn-xsrf: true" \
  -H "Content-Type: application/json" \
  -d '{
  "match" : "query",
  "query": {
    "provider" : { "type": "saml", "name": "saml1" }
  }
}'

Response

No example

Run POST api/security/session/_invalidate to invalidate sessions that were created by any OpenID Connect authentication provider for the user with the username user@my-oidc-sso.com.

Request Console 1 / 2 languages

Console Kibana Dev Tools

POST api/security/session/_invalidate
{
  "match" : "query",
  "query": {
    "provider" : { "type": "oidc" },
    "username": "user@my-oidc-sso.com"
  }
}

curl Shell

curl -X POST "https://{kibana_url}/api/security/session/_invalidate" \
  -H "kbn-xsrf: true" \
  -H "Content-Type: application/json" \
  -d '{
  "match" : "query",
  "query": {
    "provider" : { "type": "oidc" },
    "username": "user@my-oidc-sso.com"
  }
}'

Response

No example

Request { match , query , }

Responses

Request