Disable an entity resolution rule

Server: https://{kibana_url}

PUT /api/security/entity_store/resolution/rules/{id}/disable

Disable a managed entity resolution rule in this space.

[Required authorization] Route required privileges: securitySolution AND securitySolution-entity-analytics.

Path Parameters

id string · max: 100 required: The stable identifier of the entity resolution rule.

Responses

200

Updated entity resolution rule.

application/json

404

Unknown entity resolution rule.

application/json

Examples

The related user alias resolution rule was disabled in the current space.

Request Console 1 / 2 languages

Console Kibana Dev Tools

PUT /api/security/entity_store/resolution/rules/{id}/disable

curl Shell

curl -X PUT "https://{kibana_url}/api/security/entity_store/resolution/rules/{id}/disable" \
  -H "kbn-xsrf: true"

Response

{
  "description": "Related user alias resolution across identity providers",
  "enabled": false,
  "id": "related_user_alias_resolution",
  "kind": "related_user_alias_resolution",
  "managed": true
}

{
  "error": "Not Found",
  "message": "Saved object [entity-resolution-rule/unknown] not found",
  "statusCode": 404
}