Gets the status of the privileged access detection package for the Entity Analytics privileged user monitoring experience

Base URL: https://{kibana_url}

GET /api/entity_analytics/privileged_user_monitoring/pad/status

Returns the installation and ML module setup status of the privileged access detection package, along with the state of each associated ML job.

Authentication

Api key

Authorization: <value>

These APIs use key-based authentication. You must create an API key and use the encoded value in the request header. For example: Authorization: ApiKey base64AccessApiKey

Basic

Authorization: Basic <credentials>

Response

Privileged access detection status retrieved

application/json

Base URL: https://{kibana_url}

Examples

Request Console 1 / 2 languages

Console Kibana Dev Tools

GET kbn:/api/entity_analytics/privileged_user_monitoring/pad/status

Generated from the API spec

curl Shell

curl -X GET "${KIBANA_URL}/api/entity_analytics/privileged_user_monitoring/pad/status" \
  -H "Authorization: ApiKey ${API_KEY}"

Generated from the API spec

Response

{
  "jobs": [
    {
      "description": "Detects high-risk login patterns",
      "job_id": "pad-high-risk-login",
      "state": "opened"
    },
    {
      "description": "Detects privilege escalation events",
      "job_id": "pad-privilege-escalation",
      "state": "opened"
    }
  ],
  "ml_module_setup_status": "complete",
  "package_installation_status": "complete"
}