Start Entity Store engines

Server: https://{kibana_url}

PUT /api/security/entity_store/start

Start previously stopped entity engines, resuming data processing for the specified entity types.

[Required authorization] Route required privileges: securitySolution.

Request

entityTypes [] enum · default: [ "user", "host", "service", "generic" ]: Entity types to start. Defaults to all installed types.; Values: user host service generic

Response

200

Indicates a successful response.

application/json

Examples

Start all stopped entity engines.

Request Console 1 / 2 languages

Console Kibana Dev Tools

PUT kbn://api/security/entity_store/start
{
  "entityTypes": ["user", "host", "service", "generic"]
}

curl Shell

curl -X PUT -H "kbn-xsrf: true" -H "Authorization: ApiKey ${API_KEY}" \
  -H "Content-Type: application/json" \
  -d '{"entityTypes":["user","host","service","generic"]}' \
  "${KIBANA_URL}/api/security/entity_store/start"

Response

{
  "ok": true
}

Start only the host entity engine.

Request Console 1 / 2 languages

Console Kibana Dev Tools

PUT kbn:/api/security/entity_store/start
{
  "entityTypes": [
    "host"
  ]
}

curl Shell

curl -X PUT -H "kbn-xsrf: true" -H "Authorization: ApiKey ${API_KEY}" \
  -H "Content-Type: application/json" \
  -d '{
  "entityTypes": [
    "host"
  ]
}' \
  "${KIBANA_URL}/api/security/entity_store/start"

Response

{
  "ok": true
}