Get an Entity Engine

Base URL
https://{kibana_url}
Auth

Get the engine descriptor for a specific entity type, including its configuration and current status.

Path parameters

space_id string optional

An identifier for the space. If space_id is not provided in the URL, the default space is used. Refer to Spaces for more information.

entityType enum required

The entity type of the engine.

Values: user host service

Response

Successful response

application/json
delay string · pattern: [smdh]$ · default: 1m

The delay before the transform processes new data, allowing late-arriving documents to be included.

docsPerSecond integer

Throttle value for the number of documents processed per second. Use -1 for no throttle.

error object

Present when the engine status is error. Describes the failure.

action enum required

The lifecycle action that caused the error.

Values: init
message string required

A human-readable error message.

fieldHistoryLength integer required

The number of historical values retained per field.

filter string

An optional Kibana Query Language (KQL) filter applied to source documents before aggregation.

frequency string · pattern: [smdh]$ · default: 1m

How often the transform runs.

indexPattern string required

An additional Elasticsearch index pattern to include as a source for entity data. Merged with the default data view indices when the engine runs.

lookbackPeriod string · pattern: [smdh]$ · default: 24h

How far back the transform looks when calculating aggregations.

status enum required

The current operational status of an entity engine.

Values: installing started stopped updating error
timeout string · pattern: [smdh]$ · default: 180s

The timeout for initializing the aggregating transform.

timestampField string

The field used as the timestamp for source documents.

type enum required

The type of entity.

Values: user host service
Base URL
https://{kibana_url}