Install the Entity Store
- Base URL
-
https://{kibana_url}
- POST /api/security/entity_store/install
Install the Entity Store and create engines for the specified entity types. A single logExtraction configuration is shared across all entity types. Supply it once at install to customize settings; omit it (or send an empty object) to use defaults on first install or preserve the existing configuration on re-install. Omitting a field leaves it unchanged. Sending null for a field clears that override and reverts to the default value. To change settings after install, use the update endpoint.
Required authorization
- Privileges securitySolution
Responses
200
application/json
Indicates all requested entity types are already installed.
201
application/json
Indicates the Entity Store was successfully installed.
403
application/json
Insufficient privileges.