---
type: api
title: Get suggestions
description: **Spaces method and path for this operation:**
url: https://www.elastic.co/elastic/docs-builder/docs/4641/api/doc/kibana/v8/operation/operation-getendpointsuggestions
resource: https://www.elastic.co/elastic/docs-builder/docs/4641/api/doc/kibana/v8/operation/operation-getendpointsuggestions
products:
  - Kibana
---

# Get suggestions

deprecated

Authentication: required

- Server: `https://{kibana_url}`

## Paths

- `POST` `/api/endpoint/suggestions/{suggestion_type}`
- `POST` `/s/{space_id}/api/endpoint/suggestions/{suggestion_type}`

#### Path parameters

- `space_id` (string) — optional
  An identifier for the space. If `space_id` is not provided in the URL, the default space is used. Refer to [Spaces](https://www.elastic.co/docs/deploy-manage/manage-spaces) for more information.
- `suggestion_type` (enum) — required
  Values: `eventFilters`

## Request body

`application/json`

- `field` (string) — optional
- `fieldMeta` (object) — optional
- `filters` (object) — optional
- `query` (string) — optional

## Response

OK

`application/json`

Type: `object`

## Code examples

#### Console

```console
POST kbn:/api/endpoint/suggestions/eventFilters
{}
```

#### curl

```curl
curl -X POST "${KIBANA_URL}/api/endpoint/suggestions/eventFilters" \
  -H "Authorization: ApiKey ${API_KEY}" \
  -H "Content-Type: application/json" \
  -d '{}'
```

## Response examples

#### 200

`application/json`

Generated from the API spec. Values are representative. Unions use the first variant; deeply nested or large bodies may omit fields.

```json
{}
```