List entity resolution rules

Server: https://{kibana_url}

GET /api/security/entity_store/resolution/rules
GET /s/{space_id}/api/security/entity_store/resolution/rules

Refer to Spaces for more information.

List managed entity resolution rules and their effective enabled state for this space.

[Required authorization] Route required privileges: securitySolution AND securitySolution-entity-analytics.

Response

200

Entity resolution rules.

application/json

Examples

Lists the managed resolution rules and their enabled state in the current space.

Request Console 1 / 2 languages

Console Kibana Dev Tools

GET /api/security/entity_store/resolution/rules

curl Shell

curl -X GET "https://{kibana_url}/api/security/entity_store/resolution/rules"

Response

{
  "rules": [
    {
      "enabled": false,
      "id": "related_user_alias_resolution",
      "kind": "related_user_alias_resolution",
      "managed": true
    },
    {
      "enabled": true,
      "id": "email_exact_match",
      "kind": "email_exact_match",
      "managed": true
    }
  ]
}