---
type: api
title: Get Entity Store status
description: **Spaces method and path for this operation:**
url: https://www.elastic.co/elastic/docs-builder/docs/4641/api/doc/kibana/operation/operation-get-security-entity-store-status
resource: https://www.elastic.co/elastic/docs-builder/docs/4641/api/doc/kibana/operation/operation-get-security-entity-store-status
products:
  - Kibana
---

# Get Entity Store status

Authentication: required

- Server: `https://{kibana_url}`

## Paths

- `GET` `/api/security/entity_store/status`
- `GET` `/s/{space_id}/api/security/entity_store/status`

#### Path parameters

- `space_id` (string) — optional
  An identifier for the space. If `space_id` is not provided in the URL, the default space is used. Refer to [Spaces](https://www.elastic.co/docs/deploy-manage/manage-spaces) for more information.

## Description

Get the overall Entity Store status and per-engine statuses, optionally including component-level health details. Each engine reports the log extraction settings that apply to its entity type.

## Required authorization

- Privileges: `securitySolution`

## Query string parameters

- `include_components` (union enum | boolean · default: false) — optional
  If true, returns a detailed status of each engine including all its components.
  Values: `true`, `false`

## Response

Indicates a successful response.

`application/json`

## Code examples

#### Console

```console
GET kbn://api/security/entity_store/status?include_components=false
```

#### curl

```curl
curl -X GET -H "Authorization: ApiKey ${API_KEY}" \
  "${KIBANA_URL}/api/security/entity_store/status?include_components=false"
```

## Response examples

#### Entity Store not installed

`application/json`

The Entity Store has not been installed.

```json
{
  "engines": [],
  "status": "not_installed"
}
```

#### Entity Store running

`application/json`

The Entity Store is running with three started engines using default settings. Each engine reports the log extraction settings for its entity type, so the default frequency is 1m for host and user, and 10m for service.

```json
{
  "engines": [
    {
      "delay": "1m",
      "docsPerSecond": -1,
      "enrichPolicyExecutionInterval": "null",
      "fieldHistoryLength": 10,
      "filter": "",
      "frequency": "1m",
      "indexPattern": "",
      "lastExecutionTimestamp": "2026-04-10T08:30:00.000Z",
      "lookbackPeriod": "3h",
      "maxLogsPerPage": 50000,
      "maxLogsPerWindow": 100000,
      "maxLogsPerWindowCapBehavior": "drop",
      "maxPageSearchSize": 10000,
      "maxTimeWindowSize": "15m",
      "nonPriority": "null",
      "status": "started",
      "timeout": "59s",
      "timestampField": "@timestamp",
      "type": "host"
    },
    {
      "delay": "1m",
      "docsPerSecond": -1,
      "enrichPolicyExecutionInterval": "null",
      "fieldHistoryLength": 10,
      "filter": "",
      "frequency": "1m",
      "indexPattern": "",
      "lastExecutionTimestamp": "2026-04-10T08:30:00.000Z",
      "lookbackPeriod": "3h",
      "maxLogsPerPage": 50000,
      "maxLogsPerWindow": 100000,
      "maxLogsPerWindowCapBehavior": "defer",
      "maxPageSearchSize": 10000,
      "maxTimeWindowSize": "15m",
      "nonPriority": {
        "delay": "1m",
        "error": "null",
        "fieldHistoryLength": 10,
        "frequency": "1m",
        "lastExecutionTimestamp": "2026-04-10T08:26:00.000Z",
        "lookbackPeriod": "3h",
        "maxLogsPerPage": 50000,
        "maxLogsPerWindow": 100000,
        "maxLogsPerWindowCapBehavior": "drop",
        "maxTimeWindowSize": "15m",
        "samplingRate": "null",
        "status": "started",
        "timeout": "59s"
      },
      "status": "started",
      "timeout": "59s",
      "timestampField": "@timestamp",
      "type": "user"
    },
    {
      "delay": "1m",
      "docsPerSecond": -1,
      "enrichPolicyExecutionInterval": "null",
      "fieldHistoryLength": 10,
      "filter": "",
      "frequency": "10m",
      "indexPattern": "",
      "lastExecutionTimestamp": "2026-04-10T08:30:00.000Z",
      "lookbackPeriod": "3h",
      "maxLogsPerPage": 50000,
      "maxLogsPerWindow": 100000,
      "maxLogsPerWindowCapBehavior": "drop",
      "maxPageSearchSize": 10000,
      "maxTimeWindowSize": "15m",
      "nonPriority": "null",
      "status": "started",
      "timeout": "59s",
      "timestampField": "@timestamp",
      "type": "service"
    }
  ],
  "excludedUserNames": [],
  "status": "running"
}
```