---
type: api
title: Get Entity Store status
description: **Spaces method and path for this operation:**
url: https://www.elastic.co/elastic/docs-builder/docs/4493/api/doc/kibana/operation/operation-get-security-entity-store-status
resource: https://www.elastic.co/elastic/docs-builder/docs/4493/api/doc/kibana/operation/operation-get-security-entity-store-status
products:
  - Kibana
---

# Get Entity Store status

- Server: `https://{kibana_url}`

## Paths

- `GET` `/api/security/entity_store/status`
- `GET` `/s/{space_id}/api/security/entity_store/status`

## Description

Refer to [Spaces](https://www.elastic.co/docs/deploy-manage/manage-spaces) for more information.

Get the overall Entity Store status and per-engine statuses, optionally including component-level health details. Each engine reports the log extraction settings that apply to its entity type.

## Required authorization

- Privileges: `securitySolution`

## Authentication

- Api key: `Authorization: <value>`
  These APIs use key-based authentication. You must create an API key and use the encoded value in the request header. For example: `Authorization: ApiKey base64AccessApiKey`
- Basic: `Authorization: Basic <credentials>`

## Query string parameters

- `include_components` (union enum | boolean · default: false) — optional
  If true, returns a detailed status of each engine including all its components.
  Values: `true`, `false`

## Response

Indicates a successful response.

`application/json`

## Code examples

#### Console

```console
GET kbn://api/security/entity_store/status?include_components=false
```

#### curl

```curl
curl -X GET -H "Authorization: ApiKey ${API_KEY}" \
  "${KIBANA_URL}/api/security/entity_store/status?include_components=false"
```

## Response examples

#### Entity Store not installed

The Entity Store has not been installed.

```json
{
  "engines": [],
  "status": "not_installed"
}
```

#### Entity Store running

The Entity Store is running with three started engines using default settings. Each engine reports the log extraction settings for its entity type, so the default frequency is 1m for host and user, and 10m for service.

```json
{
  "engines": [
    {
      "delay": "1m",
      "docsPerSecond": -1,
      "enrichPolicyExecutionInterval": "null",
      "fieldHistoryLength": 10,
      "filter": "",
      "frequency": "1m",
      "indexPattern": "",
      "lastExecutionTimestamp": "2026-04-10T08:30:00.000Z",
      "lookbackPeriod": "3h",
      "maxLogsPerPage": 50000,
      "maxLogsPerWindow": 100000,
      "maxLogsPerWindowCapBehavior": "drop",
      "maxPageSearchSize": 10000,
      "maxTimeWindowSize": "15m",
      "nonPriority": "null",
      "status": "started",
      "timeout": "59s",
      "timestampField": "@timestamp",
      "type": "host"
    },
    {
      "delay": "1m",
      "docsPerSecond": -1,
      "enrichPolicyExecutionInterval": "null",
      "fieldHistoryLength": 10,
      "filter": "",
      "frequency": "1m",
      "indexPattern": "",
      "lastExecutionTimestamp": "2026-04-10T08:30:00.000Z",
      "lookbackPeriod": "3h",
      "maxLogsPerPage": 50000,
      "maxLogsPerWindow": 100000,
      "maxLogsPerWindowCapBehavior": "defer",
      "maxPageSearchSize": 10000,
      "maxTimeWindowSize": "15m",
      "nonPriority": {
        "delay": "1m",
        "error": "null",
        "fieldHistoryLength": 10,
        "frequency": "1m",
        "lastExecutionTimestamp": "2026-04-10T08:26:00.000Z",
        "lookbackPeriod": "3h",
        "maxLogsPerPage": 50000,
        "maxLogsPerWindow": 100000,
        "maxLogsPerWindowCapBehavior": "drop",
        "maxTimeWindowSize": "15m",
        "samplingRate": "null",
        "status": "started",
        "timeout": "59s"
      },
      "status": "started",
      "timeout": "59s",
      "timestampField": "@timestamp",
      "type": "user"
    },
    {
      "delay": "1m",
      "docsPerSecond": -1,
      "enrichPolicyExecutionInterval": "null",
      "fieldHistoryLength": 10,
      "filter": "",
      "frequency": "10m",
      "indexPattern": "",
      "lastExecutionTimestamp": "2026-04-10T08:30:00.000Z",
      "lookbackPeriod": "3h",
      "maxLogsPerPage": 50000,
      "maxLogsPerWindow": 100000,
      "maxLogsPerWindowCapBehavior": "drop",
      "maxPageSearchSize": 10000,
      "maxTimeWindowSize": "15m",
      "nonPriority": "null",
      "status": "started",
      "timeout": "59s",
      "timestampField": "@timestamp",
      "type": "service"
    }
  ],
  "excludedUserNames": [],
  "status": "running"
}
```