Initiate a detection alert migration

Base URL
https://{kibana_url}
  • POST /api/detection_engine/signals/migration
  • POST /s/{space_id}/api/detection_engine/signals/migration
Auth Deprecated

DEPRECATED. Legacy API for on-demand reindexing of old .siem-signals-* alert indices. Do not build new integrations; upgrade the Elastic Stack and rely on product-managed data lifecycle instead. WARNING: Migrations can be resource intensive and should be planned during a maintenance window.

Initiate a migration of detection alerts. Migrations are initiated per index. The process is not destructive and should not remove existing data, but it can consume significant cluster resources. Plan capacity accordingly.

Path parameters

space_id string optional

An identifier for the space. If space_id is not provided in the URL, the default space is used. Refer to Spaces for more information.

Request body

Alerts migration parameters

index string[] · format: nonempty · min items: 1 required

Array of index names to migrate.

requests_per_second integer · min: 1

The throttle for the migration task in sub-requests per second. Corresponds to requests_per_second on the Reindex API.

size integer · min: 1

Number of alerts to migrate per batch. Corresponds to the source.size option on the Reindex API.

slices integer · min: 1

The number of subtasks for the migration task. Corresponds to slices on the Reindex API.

Responses

Successful response

application/json
indices union oneOf[] required
One of:
index string required
migration_id string required
migration_index string required

Invalid input data response

application/json
One of:
error string required
message string required
statusCode integer required

Unsuccessful authentication response

application/json
error string required
message string required
statusCode integer required

Internal server error response

application/json
message string required
status_code integer required
Base URL
https://{kibana_url}