Change Updates

Do not miss any Elastic APIs Hub changes, ever again

Subscribe to the Elastic APIs Hub changelog to be up to date on recent changes.

RSS

Changelog

Last update:
Kibana Serverless API
42 structure changes including:
8 Additions
34 Modifications
Modified 34
GET /api/fleet/settings
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • prerelease_integrations_enabled property Modified
          • Property is no longer required
        • delete_unenrolled_agents property Added
GET /api/note
  • Query
  • userFilter, associatedFilter query parameters Added
GET /api/spaces/space
  • Response
  • 200 response Added
GET /api/spaces/space/{id}
  • Response
  • 200 response Added
PATCH /api/detection_engine/rules
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • Security_Detections_API_ThresholdRulePatchFields alternative Modified
      • response_actions property Added
    • Security_Detections_API_ThreatMatchRulePatchFields alternative Modified
      • response_actions property Added
    • Security_Detections_API_MachineLearningRulePatchFields alternative Modified
      • response_actions property Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • Security_Detections_API_ThresholdRuleResponseFields alternative Modified
        • response_actions property Added
      • Security_Detections_API_ThreatMatchRuleResponseFields alternative Modified
        • response_actions property Added
      • Security_Detections_API_MachineLearningRuleResponseFields alternative Modified
        • response_actions property Added
POST /api/actions/connector/{id}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • secrets property Modified
      • gemini_secrets alternative Modified
        • credentialsJson property Modified
          • Name went from credentialsJSON to credentialsJson
POST /api/alerting/rule/{id}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • flapping property Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • flapping property Added
POST /api/alerting/rule/{id}/_mute_all
  • Response
  • 400, 403, 404 responses Added
POST /api/alerting/rule/{id}/_unmute_all
  • Response
  • 400, 403, 404 responses Added
POST /api/detection_engine/rules
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • Security_Detections_API_ThresholdRuleCreateFields alternative Modified
      • response_actions property Added
    • Security_Detections_API_ThreatMatchRuleCreateFields alternative Modified
      • response_actions property Added
    • Security_Detections_API_MachineLearningRuleCreateFields alternative Modified
      • response_actions property Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • Security_Detections_API_ThresholdRuleResponseFields alternative Modified
        • response_actions property Added
      • Security_Detections_API_ThreatMatchRuleResponseFields alternative Modified
        • response_actions property Added
      • Security_Detections_API_MachineLearningRuleResponseFields alternative Modified
        • response_actions property Added
POST /api/detection_engine/rules/_bulk_action
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • Security_Detections_API_BulkEditActionResponse alternative Modified
        • attributes property Modified
POST /api/detection_engine/rules/preview
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • Security_Detections_API_RulePreviewParams alternative Modified
      • data_view_id, event_category_override, filters, index, tiebreaker_field, timestamp_field properties Added
    • Security_Detections_API_RulePreviewParams alternative Modified
      • language, query properties Modified
        • Properties are no longer required
      • data_view_id, filters, index, saved_id properties Added
    • Security_Detections_API_RulePreviewParams alternative Modified
      • query, language properties Modified
        • Properties are no longer required
      • saved_id, data_view_id, filters, index properties Added
    • Security_Detections_API_RulePreviewParams alternative Modified
      • alert_suppression property Modified
        • duration property Modified
          • Property is now required
        • group_by, missing_fields_strategy properties Removed
      • language property Modified
        • Property is no longer required
      • threshold, data_view_id, filters, index, saved_id properties Added
    • Security_Detections_API_RulePreviewParams alternative Modified
      • language property Modified
        • Property is no longer required
      • threat_index, threat_mapping, threat_query, concurrent_searches, data_view_id, filters, index, items_per_search, saved_id, threat_filters, threat_indicator_path, threat_language properties Added
    • Security_Detections_API_RulePreviewParams alternative Modified
      • language, query properties Removed
      • anomaly_threshold property Added
      • machine_learning_job_id property Added
        • string-1, array-2 properties Added
    • Security_Detections_API_RulePreviewParams alternative Modified
      • language property Modified
        • Property is no longer required
      • history_window_start, new_terms_fields, data_view_id, filters, index properties Added
POST /api/endpoint/suggestions/{suggestion_type}
  • Operation is now deprecated
POST /api/entity_store/engines/{entityType}/init
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • fieldHistoryLength property Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • indexPattern, status, type properties Modified
        • Properties are now required
      • fieldHistoryLength property Added
POST /api/spaces/space
  • Response
  • 200 response Added
PUT /api/actions/connector/{id}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • secrets property Modified
      • gemini_secrets alternative Modified
        • credentialsJson property Modified
          • Name went from credentialsJSON to credentialsJson
PUT /api/alerting/rule/{id}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • flapping property Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • flapping property Added
PUT /api/detection_engine/rules
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • Security_Detections_API_ThresholdRuleCreateFields alternative Modified
      • response_actions property Added
    • Security_Detections_API_ThreatMatchRuleCreateFields alternative Modified
      • response_actions property Added
    • Security_Detections_API_MachineLearningRuleCreateFields alternative Modified
      • response_actions property Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • Security_Detections_API_ThresholdRuleResponseFields alternative Modified
        • response_actions property Added
      • Security_Detections_API_ThreatMatchRuleResponseFields alternative Modified
        • response_actions property Added
      • Security_Detections_API_MachineLearningRuleResponseFields alternative Modified
        • response_actions property Added
PUT /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • discovery property Added
      • response property Modified
        • discovery property Added
PUT /api/fleet/settings
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • delete_unenrolled_agents property Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • prerelease_integrations_enabled property Modified
          • Property is no longer required
        • delete_unenrolled_agents property Added
PUT /api/spaces/space/{id}
  • Response
  • 200 response Added
DELETE /api/detection_engine/rules
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • Security_Detections_API_ThresholdRuleResponseFields alternative Modified
        • response_actions property Added
      • Security_Detections_API_ThreatMatchRuleResponseFields alternative Modified
        • response_actions property Added
      • Security_Detections_API_MachineLearningRuleResponseFields alternative Modified
        • response_actions property Added
DELETE /api/spaces/space/{id}
  • Response
  • 204, 404 responses Added
GET /api/alerting/rule/{id}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • flapping property Added
GET /api/alerting/rules/_find
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • flapping property Added
GET /api/detection_engine/rules
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • Security_Detections_API_ThresholdRuleResponseFields alternative Modified
        • response_actions property Added
      • Security_Detections_API_ThreatMatchRuleResponseFields alternative Modified
        • response_actions property Added
      • Security_Detections_API_MachineLearningRuleResponseFields alternative Modified
        • response_actions property Added
GET /api/detection_engine/rules/_find
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • data property Modified
        • Security_Detections_API_ThresholdRuleResponseFields, Security_Detections_API_ThreatMatchRuleResponseFields, Security_Detections_API_MachineLearningRuleResponseFields alternatives Modified
GET /api/endpoint/metadata/transforms
  • Operation is now deprecated
GET /api/entity_store/engines
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • engines property Modified
        • indexPattern, status, type properties Modified
          • Properties are now required
        • fieldHistoryLength property Added
GET /api/entity_store/engines/{entityType}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • indexPattern, status, type properties Modified
        • Properties are now required
      • fieldHistoryLength property Added
GET /api/entity_store/entities/list
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • records property Modified
        • Security_Entity_Analytics_API_UserEntity, Security_Entity_Analytics_API_HostEntity alternatives Modified
GET /api/fleet/agent_policies
  • Query
  • noAgentCount query parameter Modified
    • Query parameter is now deprecated
  • withAgentCount query parameter Added
GET /api/fleet/epm/packages
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • items property Modified
        • discovery property Added
      • response property Modified
        • discovery property Added
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • discovery property Added
      • response property Modified
        • discovery property Added
Added 8
PUT /api/security/role/{name}
POST /api/security/roles
POST /api/fleet/agent_policies/outputs
POST /api/entity_store/engines/apply_dataview_indices
GET /api/security/role/{name}
GET /api/security/role
GET /api/fleet/agent_policies/{agentPolicyId}/outputs
DELETE /api/security/role/{name}
Kibana API
380 structure changes including:
93 Breaking changes
269 Additions
8 Modifications
103 Removals
Modified 8 Breaking
GET /api/alerting/rule/{id}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • flapping property Added
GET /api/alerting/rules/_find
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • flapping property Added
POST /api/actions/connector/{id}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • secrets property Modified
      • gemini_secrets alternative Modified
        • credentialsJson property Modified
          • Name went from credentialsJSON to credentialsJson
            Breaking
POST /api/alerting/rule/{id}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • flapping property Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • flapping property Added
POST /api/alerting/rule/{id}/_mute_all
  • Response
  • 400, 403, 404 responses Added
POST /api/alerting/rule/{id}/_unmute_all
  • Response
  • 400, 403, 404 responses Added
PUT /api/actions/connector/{id}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • secrets property Modified
      • gemini_secrets alternative Modified
        • credentialsJson property Modified
          • Name went from credentialsJSON to credentialsJson
            Breaking
PUT /api/alerting/rule/{id}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • flapping property Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • flapping property Added
Removed 103 Breaking
GET /api/fleet/epm/packages/{pkgName}/stats
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/epm/packages/limited
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/epm/packages
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/epm/categories
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/enrollment_api_keys/{keyId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/enrollment_api_keys
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/enrollment-api-keys/{keyId}
GET /api/fleet/enrollment-api-keys
GET /api/fleet/data_streams
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agents/{agentId}/uploads
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agents/{agentId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agents/tags
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}/{filePath}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/epm/packages/{pkgkey}
GET /api/fleet/epm/templates/{pkgName}/{pkgVersion}/inputs
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/epm/verification_key_id
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/fleet_server_hosts
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/fleet_server_hosts/{itemId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/kubernetes
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/outputs
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/outputs/{outputId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/outputs/{outputId}/health
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/epm/packages
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
DELETE /api/fleet/agent_download_sources/{sourceId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
DELETE /api/fleet/agents/files/{fileId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
DELETE /api/fleet/agents/{agentId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
DELETE /api/fleet/enrollment-api-keys/{keyId}
DELETE /api/fleet/enrollment_api_keys/{keyId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
DELETE /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
DELETE /api/fleet/epm/packages/{pkgkey}
DELETE /api/fleet/fleet_server_hosts/{itemId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
DELETE /api/fleet/outputs/{outputId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
DELETE /api/fleet/package_policies/{packagePolicyId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
DELETE /api/fleet/proxies/{itemId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agent-status
GET /api/fleet/agent_download_sources
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agent_download_sources/{sourceId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agent_policies
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agent_policies/{agentPolicyId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agent_policies/{agentPolicyId}/download
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agent_policies/{agentPolicyId}/full
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agent_status
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agent_status/data
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agents
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agents/action_status
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agents/files/{fileId}/{fileName}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/agents/setup
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/epm/packages/_bulk
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}/transforms/authorize
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/epm/packages/{pkgkey}
POST /api/fleet/fleet_server_hosts
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/health_check
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/logstash_api_keys
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/outputs
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/package_policies
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/package_policies/_bulk_get
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/package_policies/delete
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/package_policies/upgrade
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/package_policies/upgrade/dryrun
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/proxies
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/service-tokens
POST /api/fleet/service_tokens
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/setup
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
PUT /api/fleet/agent_download_sources/{sourceId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
PUT /api/fleet/agent_policies/{agentPolicyId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
PUT /api/fleet/agents/{agentId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
PUT /api/fleet/agents/{agentId}/reassign
PUT /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
PUT /api/fleet/fleet_server_hosts/{itemId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
PUT /api/fleet/outputs/{outputId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
PUT /api/fleet/package_policies/{packagePolicyId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
PUT /api/fleet/proxies/{itemId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
PUT /api/fleet/settings
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/package_policies
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/package_policies/{packagePolicyId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/proxies
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/proxies/{itemId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/settings
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/uninstall_tokens
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/fleet/uninstall_tokens/{uninstallTokenId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agent_download_sources
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agent_policies
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agent_policies/_bulk_get
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agent_policies/delete
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agent_policies/{agentPolicyId}/copy
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/actions/{actionId}/cancel
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/epm/bulk_assets
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/enrollment_api_keys
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/enrollment-api-keys
POST /api/fleet/agents/{agentId}/upgrade
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/{agentId}/unenroll
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/{agentId}/request_diagnostics
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/{agentId}/reassign
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/{agentId}/actions
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/setup
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/bulk_upgrade
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/bulk_update_agent_tags
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/bulk_unenroll
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/bulk_request_diagnostics
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/fleet/agents/bulk_reassign
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
Added 269
POST /api/fleet/package_policies/upgrade/dryrun
POST /api/fleet/package_policies/upgrade
POST /api/fleet/package_policies/delete
POST /api/fleet/package_policies/_bulk_get
POST /api/fleet/package_policies
POST /api/fleet/outputs
POST /api/fleet/message_signing_service/rotate_key_pair
POST /api/fleet/logstash_api_keys
POST /api/fleet/health_check
POST /api/fleet/fleet_server_hosts
POST /api/fleet/proxies
POST /api/fleet/service_tokens
POST /api/fleet/setup
POST /api/lists
POST /api/lists/index
POST /api/lists/items
POST /api/lists/items/_export
POST /api/lists/items/_import
POST /api/osquery/live_queries
PUT /api/detection_engine/rules/prepackaged
POST /api/fleet/agents
POST /api/fleet/agents/actions/{actionId}/cancel
POST /api/fleet/agents/bulk_reassign
POST /api/fleet/agents/bulk_request_diagnostics
POST /api/fleet/agents/bulk_unenroll
POST /api/fleet/agents/bulk_update_agent_tags
POST /api/fleet/agents/bulk_upgrade
POST /api/fleet/agents/setup
POST /api/fleet/agents/{agentId}/actions
POST /api/fleet/agents/{agentId}/reassign
POST /api/fleet/agents/{agentId}/request_diagnostics
POST /api/fleet/agents/{agentId}/unenroll
POST /api/fleet/agents/{agentId}/upgrade
POST /api/fleet/enrollment_api_keys
POST /api/fleet/epm/bulk_assets
POST /api/fleet/epm/custom_integrations
POST /api/fleet/epm/packages
POST /api/fleet/epm/packages/_bulk
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}/transforms/authorize
PUT /api/endpoint_list/items
PUT /api/exception_lists
PUT /api/exception_lists/items
PUT /api/fleet/agent_download_sources/{sourceId}
PUT /api/fleet/agent_policies/{agentPolicyId}
PUT /api/fleet/agents/{agentId}
PUT /api/fleet/epm/packages/{pkgName}/{pkgVersion}
PUT /api/fleet/fleet_server_hosts/{itemId}
PUT /api/fleet/outputs/{outputId}
PUT /api/fleet/package_policies/{packagePolicyId}
PUT /api/fleet/proxies/{itemId}
PUT /api/fleet/settings
PUT /api/lists
PUT /api/lists/items
PUT /api/osquery/packs/{id}
PUT /api/osquery/saved_queries/{id}
PUT /api/security/role/{name}
PUT /api/security_ai_assistant/current_user/conversations/{id}
PUT /api/spaces/space/{id}
POST /api/osquery/packs
POST /api/osquery/saved_queries
POST /api/risk_score/engine/schedule_now
POST /api/security/roles
POST /api/security_ai_assistant/anonymization_fields/_bulk_action
POST /api/security_ai_assistant/chat/complete
POST /api/security_ai_assistant/current_user/conversations
POST /api/security_ai_assistant/prompts/_bulk_action
POST /api/spaces/_copy_saved_objects
POST /api/spaces/_disable_legacy_url_aliases
POST /api/spaces/_get_shareable_references
POST /api/spaces/_update_objects_spaces
POST /api/spaces/space
POST /api/timeline
POST /api/timeline/_draft
POST /api/timeline/_export
POST /api/timeline/_import
POST /api/timeline/_prepackaged
PUT /api/detection_engine/rules
PUT /api/detection_engine/rules/_bulk_update
GET /api/fleet/agents/action_status
GET /api/fleet/agents
GET /api/fleet/agent_status/data
GET /api/fleet/agent_status
GET /api/fleet/agent_policies/{agentPolicyId}/outputs
GET /api/fleet/agent_policies/{agentPolicyId}/full
GET /api/fleet/agent_policies/{agentPolicyId}/download
GET /api/fleet/agent_policies/{agentPolicyId}
GET /api/fleet/agent_policies
GET /api/fleet/agent_download_sources/{sourceId}
GET /api/fleet/agent_download_sources
GET /api/exception_lists/summary
GET /api/exception_lists/items/_find
GET /api/exception_lists/items
GET /api/exception_lists/_find
GET /api/exception_lists
GET /api/entity_store/entities/list
GET /api/entity_store/engines/{entityType}
GET /api/entity_store/engines
GET /api/endpoint_list/items/_find
GET /api/endpoint_list/items
GET /api/endpoint/protection_updates_note/{package_policy_id}
GET /api/endpoint/policy_response
DELETE /api/osquery/saved_queries/{id}
GET /api/fleet/kubernetes/download
GET /api/fleet/kubernetes
GET /api/fleet/fleet_server_hosts/{itemId}
GET /api/fleet/fleet_server_hosts
GET /api/fleet/epm/verification_key_id
GET /api/fleet/epm/templates/{pkgName}/{pkgVersion}/inputs
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}/{filePath*}
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}
GET /api/fleet/epm/packages/{pkgName}/stats
GET /api/fleet/epm/packages/limited
GET /api/fleet/epm/packages/installed
GET /api/fleet/epm/packages
GET /api/fleet/epm/data_streams
GET /api/fleet/epm/categories
GET /api/fleet/enrollment_api_keys/{keyId}
GET /api/fleet/enrollment_api_keys
GET /api/fleet/data_streams
GET /api/fleet/check-permissions
GET /api/fleet/agents/{agentId}/uploads
GET /api/fleet/agents/{agentId}
GET /api/fleet/agents/tags
GET /api/fleet/agents/setup
GET /api/fleet/agents/files/{fileId}/{fileName}
GET /api/fleet/agents/available_versions
DELETE /api/osquery/packs/{id}
DELETE /api/note
DELETE /api/lists/items
DELETE /api/lists/index
DELETE /api/lists
DELETE /api/fleet/proxies/{itemId}
DELETE /api/fleet/package_policies/{packagePolicyId}
DELETE /api/fleet/outputs/{outputId}
DELETE /api/fleet/fleet_server_hosts/{itemId}
DELETE /api/fleet/epm/packages/{pkgName}/{pkgVersion}
DELETE /api/fleet/enrollment_api_keys/{keyId}
DELETE /api/fleet/agents/{agentId}
DELETE /api/fleet/agents/files/{fileId}
DELETE /api/fleet/agent_download_sources/{sourceId}
DELETE /api/exception_lists/items
DELETE /api/exception_lists
DELETE /api/entity_store/engines/{entityType}
DELETE /api/endpoint_list/items
DELETE /api/detection_engine/signals/migration
DELETE /api/detection_engine/rules/_bulk_delete
DELETE /api/detection_engine/rules
DELETE /api/detection_engine/index
DELETE /api/asset_criticality
GET /api/endpoint/policy/summaries
GET /api/endpoint/metadata/{id}
GET /api/endpoint/metadata/transforms
GET /api/endpoint/metadata
GET /api/endpoint/action_status
GET /api/endpoint/action_log/{agent_id}
GET /api/endpoint/action/{action_id}/file/{file_id}/download
GET /api/endpoint/action/{action_id}/file/{file_id}
GET /api/endpoint/action/{action_id}
GET /api/endpoint/action/state
GET /api/endpoint/action
GET /api/detection_engine/tags
GET /api/detection_engine/rules/prepackaged/_status
GET /api/detection_engine/rules/_find
GET /api/detection_engine/rules
GET /api/detection_engine/privileges
GET /api/detection_engine/index
GET /api/asset_criticality/list
GET /api/asset_criticality
DELETE /api/timeline
DELETE /api/spaces/space/{id}
DELETE /api/security_ai_assistant/current_user/conversations/{id}
DELETE /api/security/role/{name}
DELETE /api/risk_score/engine/dangerously_delete_data
POST /api/endpoint/action/unisolate
POST /api/endpoint/action/suspend_process
POST /api/endpoint/action/scan
POST /api/endpoint/action/running_procs
POST /api/endpoint/action/kill_process
POST /api/endpoint/action/isolate
POST /api/endpoint/action/get_file
POST /api/endpoint/action/execute
POST /api/detection_engine/signals/tags
POST /api/detection_engine/signals/status
POST /api/detection_engine/signals/search
POST /api/detection_engine/signals/migration_status
POST /api/detection_engine/signals/migration
POST /api/detection_engine/signals/finalize_migration
POST /api/detection_engine/signals/assignees
POST /api/detection_engine/rules/{id}/exceptions
POST /api/detection_engine/rules/preview
POST /api/detection_engine/rules/_import
POST /api/detection_engine/rules/_export
POST /api/detection_engine/rules/_bulk_delete
POST /api/detection_engine/rules/_bulk_create
POST /api/detection_engine/rules/_bulk_action
POST /api/detection_engine/rules
GET /api/osquery/saved_queries/{id}
POST /api/fleet/agent_policies/{agentPolicyId}/copy
POST /api/fleet/agent_policies/outputs
POST /api/fleet/agent_policies/delete
POST /api/fleet/agent_policies/_bulk_get
POST /api/fleet/agent_policies
POST /api/fleet/agent_download_sources
POST /api/exceptions/shared
POST /api/exception_lists/items
POST /api/exception_lists/_import
POST /api/exception_lists/_export
POST /api/exception_lists/_duplicate
POST /api/exception_lists
POST /api/entity_store/engines/{entityType}/stop
POST /api/entity_store/engines/{entityType}/stats
POST /api/entity_store/engines/{entityType}/start
POST /api/entity_store/engines/{entityType}/init
POST /api/entity_store/engines/apply_dataview_indices
POST /api/endpoint_list/items
POST /api/endpoint_list
POST /api/endpoint/unisolate
POST /api/endpoint/suggestions/{suggestion_type}
POST /api/endpoint/protection_updates_note/{package_policy_id}
POST /api/endpoint/isolate
POST /api/endpoint/action/upload
GET /api/osquery/saved_queries
GET /api/osquery/packs/{id}
GET /api/osquery/packs
GET /api/osquery/live_queries/{id}/results/{actionId}
GET /api/osquery/live_queries/{id}
GET /api/osquery/live_queries
GET /api/note
GET /api/lists/privileges
GET /api/lists/items/_find
GET /api/lists/items
GET /api/lists/index
GET /api/lists/_find
GET /api/lists
GET /api/fleet/uninstall_tokens/{uninstallTokenId}
GET /api/fleet/uninstall_tokens
GET /api/fleet/settings
GET /api/fleet/proxies/{itemId}
GET /api/fleet/proxies
GET /api/fleet/package_policies/{packagePolicyId}
GET /api/fleet/package_policies
GET /api/fleet/outputs/{outputId}/health
GET /api/fleet/outputs/{outputId}
GET /api/fleet/outputs
POST /api/detection_engine/index
POST /api/asset_criticality/bulk
POST /api/asset_criticality
PATCH /api/timeline/_favorite
PATCH /api/timeline
PATCH /api/pinned_event
PATCH /api/note
PATCH /api/lists/items
PATCH /api/lists
PATCH /api/detection_engine/rules/_bulk_update
PATCH /api/detection_engine/rules
GET /api/timelines
GET /api/timeline/resolve
GET /api/timeline/_draft
GET /api/timeline/_copy
GET /api/timeline
GET /api/spaces/space/{id}
GET /api/spaces/space
GET /api/security_ai_assistant/prompts/_find
GET /api/security_ai_assistant/current_user/conversations/{id}
GET /api/security_ai_assistant/current_user/conversations/_find
GET /api/security_ai_assistant/anonymization_fields/_find
GET /api/security/role/{name}
GET /api/security/role
Elasticsearch Serverless API
18 structure changes including:
18 Modifications
Modified 18
GET /_analyze
  • Body
  • application/json content type Modified
    • char_filter, filter properties Modified
      • Type went from array[string | object] to array
    • tokenizer property Removed
      • analysis:Tokenizer property Removed
      • property Removed
        • analysis:CharGroupTokenizer, analysis:ClassicTokenizer, analysis:EdgeNGramTokenizer, analysis:KeywordTokenizer, analysis:LetterTokenizer, analysis:LowercaseTokenizer, analysis:NGramTokenizer, analysis:PathHierarchyTokenizer, analysis:PatternTokenizer, analysis:SimplePatternTokenizer, analysis:SimplePatternSplitTokenizer, analysis:StandardTokenizer, analysis:ThaiTokenizer, analysis:UaxEmailUrlTokenizer, analysis:WhitespaceTokenizer, analysis:IcuTokenizer, analysis:KuromojiTokenizer, analysis:NoriTokenizer properties Removed
GET /_connector
  • Response
  • 200 response Modified
    • application/json content type Modified
      • results property Modified
        • filtering property Modified
GET /_connector/_sync_job
  • Response
  • 200 response Modified
    • application/json content type Modified
      • results property Modified
        • connector property Modified
GET /_connector/_sync_job/{connector_sync_job_id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • connector property Modified
        • filtering property Modified
GET /_connector/{connector_id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • filtering property Modified
        • active, draft properties Modified
GET /_ml/anomaly_detectors
  • Response
  • 200 response Modified
    • application/json content type Modified
      • jobs property Modified
        • analysis_config property Modified
GET /_ml/anomaly_detectors/{job_id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • jobs property Modified
        • analysis_config property Modified
GET /_ml/datafeeds/_preview
  • Body
  • application/json content type Modified
    • job_config property Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
GET /_ml/datafeeds/{datafeed_id}/_preview
  • Body
  • application/json content type Modified
    • job_config property Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
GET /{index}/_analyze
  • Body
  • application/json content type Modified
    • char_filter, filter properties Modified
      • Type went from array[string | object] to array
    • tokenizer property Removed
      • analysis:Tokenizer property Removed
      • property Removed
        • analysis:CharGroupTokenizer, analysis:ClassicTokenizer, analysis:EdgeNGramTokenizer, analysis:KeywordTokenizer, analysis:LetterTokenizer, analysis:LowercaseTokenizer, analysis:NGramTokenizer, analysis:PathHierarchyTokenizer, analysis:PatternTokenizer, analysis:SimplePatternTokenizer, analysis:SimplePatternSplitTokenizer, analysis:StandardTokenizer, analysis:ThaiTokenizer, analysis:UaxEmailUrlTokenizer, analysis:WhitespaceTokenizer, analysis:IcuTokenizer, analysis:KuromojiTokenizer, analysis:NoriTokenizer properties Removed
POST /_analyze
  • Body
  • application/json content type Modified
    • char_filter, filter properties Modified
      • Type went from array[string | object] to array
    • tokenizer property Removed
      • analysis:Tokenizer property Removed
      • property Removed
        • analysis:CharGroupTokenizer, analysis:ClassicTokenizer, analysis:EdgeNGramTokenizer, analysis:KeywordTokenizer, analysis:LetterTokenizer, analysis:LowercaseTokenizer, analysis:NGramTokenizer, analysis:PathHierarchyTokenizer, analysis:PatternTokenizer, analysis:SimplePatternTokenizer, analysis:SimplePatternSplitTokenizer, analysis:StandardTokenizer, analysis:ThaiTokenizer, analysis:UaxEmailUrlTokenizer, analysis:WhitespaceTokenizer, analysis:IcuTokenizer, analysis:KuromojiTokenizer, analysis:NoriTokenizer properties Removed
POST /_ml/anomaly_detectors/_estimate_model_memory
  • Body
  • application/json content type Modified
    • analysis_config property Modified
      • categorization_analyzer property Modified
        • _types:CategorizationAnalyzerDefinition alternative Modified
POST /_ml/anomaly_detectors/{job_id}/_update
  • Response
  • 200 response Modified
    • application/json content type Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
POST /_ml/datafeeds/_preview
  • Body
  • application/json content type Modified
    • job_config property Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
POST /_ml/datafeeds/{datafeed_id}/_preview
  • Body
  • application/json content type Modified
    • job_config property Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
POST /{index}/_analyze
  • Body
  • application/json content type Modified
    • char_filter, filter properties Modified
      • Type went from array[string | object] to array
    • tokenizer property Removed
      • analysis:Tokenizer property Removed
      • property Removed
        • analysis:CharGroupTokenizer, analysis:ClassicTokenizer, analysis:EdgeNGramTokenizer, analysis:KeywordTokenizer, analysis:LetterTokenizer, analysis:LowercaseTokenizer, analysis:NGramTokenizer, analysis:PathHierarchyTokenizer, analysis:PatternTokenizer, analysis:SimplePatternTokenizer, analysis:SimplePatternSplitTokenizer, analysis:StandardTokenizer, analysis:ThaiTokenizer, analysis:UaxEmailUrlTokenizer, analysis:WhitespaceTokenizer, analysis:IcuTokenizer, analysis:KuromojiTokenizer, analysis:NoriTokenizer properties Removed
PUT /_connector/{connector_id}/_filtering
  • Body
  • application/json content type Modified
    • filtering property Modified
      • active property Modified
        • advanced_snippet property Modified
      • draft property Modified
        • advanced_snippet property Modified
    • advanced_snippet property Modified
      • value property Modified
        • * property Removed
PUT /_ml/anomaly_detectors/{job_id}
  • Body
  • application/json content type Modified
    • analysis_config property Modified
      • categorization_analyzer property Modified
        • _types:CategorizationAnalyzerDefinition alternative Modified
  • Response
  • 200 response Modified
    • application/json content type Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
Elasticsearch Serverless API

This documentation refresh adds API status details such as when they were first added.

29 structure changes including:
6 Additions
19 Modifications
4 Removals
Modified 19
PUT /_ingest/pipeline/{id}
  • Operation is now Added in 5.0.0
  • Operation is no longer beta
  • Body
  • application/json content type Modified
    • on_failure property Modified
      • date property Modified
        • output_format property Added
      • grok property Modified
        • ecs_compatibility property Added
      • community_id, fingerprint, network_direction, registered_domain, terminate properties Added
    • processors property Modified
      • date property Modified
        • output_format property Added
      • grok property Modified
        • ecs_compatibility property Added
      • community_id, fingerprint, network_direction, registered_domain, terminate properties Added
PUT /_inference/{task_type}/{inference_id}
  • Operation is now Technical preview
  • Operation is no longer beta
  • Body
  • application/json content type Modified
    • task_settings property Modified
      • Property is no longer required
  • Response
  • 200 response Modified
    • application/json content type Modified
      • task_settings property Modified
        • Property is no longer required
PUT /_inference/{inference_id}
  • Operation is now Technical preview
  • Operation is no longer beta
  • Body
  • application/json content type Modified
    • task_settings property Modified
      • Property is no longer required
  • Response
  • 200 response Modified
    • application/json content type Modified
      • task_settings property Modified
        • Property is no longer required
POST /_security/api_key
  • Operation is now Added in 6.7.0
  • Operation is no longer beta
  • Body
  • application/json content type Modified
    • role_descriptors property Modified
      • * property Modified
        • indices property Modified
POST /_security/_query/api_key
  • Operation is now Added in 7.15.0
  • Operation is no longer beta
  • Response
  • 200 response Modified
    • application/json content type Modified
      • api_keys property Modified
        • role_descriptors, limited_by properties Modified
POST /_ingest/pipeline/{id}/_simulate
  • Operation is now Added in 5.0.0
  • Operation is no longer beta
  • Body
  • application/json content type Modified
    • pipeline property Modified
      • on_failure property Modified
        • date, grok properties Modified
        • community_id, fingerprint, network_direction, registered_domain, terminate properties Added
      • processors property Modified
        • date, grok properties Modified
        • community_id, fingerprint, network_direction, registered_domain, terminate properties Added
POST /_ingest/pipeline/_simulate
  • Operation is now Added in 5.0.0
  • Operation is no longer beta
  • Body
  • application/json content type Modified
    • pipeline property Modified
      • on_failure property Modified
        • date, grok properties Modified
        • community_id, fingerprint, network_direction, registered_domain, terminate properties Added
      • processors property Modified
        • date, grok properties Modified
        • community_id, fingerprint, network_direction, registered_domain, terminate properties Added
GET /_security/api_key
  • Operation is now Added in 6.7.0
  • Operation is no longer beta
  • Response
  • 200 response Modified
    • application/json content type Modified
      • api_keys property Modified
        • role_descriptors, limited_by properties Modified
GET /_security/_query/api_key
  • Operation is now Added in 7.15.0
  • Operation is no longer beta
  • Response
  • 200 response Modified
    • application/json content type Modified
      • api_keys property Modified
        • role_descriptors, limited_by properties Modified
GET /_security/_authenticate
  • Operation is now Added in 5.5.0
  • Operation is no longer beta
  • Response
  • 200 response Modified
    • application/json content type Modified
      • api_key property Modified
        • role_descriptors, limited_by properties Modified
GET /_ingest/pipeline/{id}/_simulate
  • Operation is now Added in 5.0.0
  • Operation is no longer beta
  • Body
  • application/json content type Modified
    • pipeline property Modified
      • on_failure property Modified
        • date, grok properties Modified
        • community_id, fingerprint, network_direction, registered_domain, terminate properties Added
      • processors property Modified
        • date, grok properties Modified
        • community_id, fingerprint, network_direction, registered_domain, terminate properties Added
GET /_ingest/pipeline/{id}
  • Operation is now Added in 5.0.0
  • Operation is no longer beta
  • Response
  • 200 response Modified
    • application/json content type Modified
      • * property Modified
        • on_failure, processors properties Modified
GET /_ingest/pipeline/_simulate
  • Operation is now Added in 5.0.0
  • Operation is no longer beta
  • Body
  • application/json content type Modified
    • pipeline property Modified
      • on_failure property Modified
        • date, grok properties Modified
        • community_id, fingerprint, network_direction, registered_domain, terminate properties Added
      • processors property Modified
        • date, grok properties Modified
        • community_id, fingerprint, network_direction, registered_domain, terminate properties Added
GET /_ingest/pipeline
  • Operation is now Added in 5.0.0
  • Operation is no longer beta
  • Response
  • 200 response Modified
    • application/json content type Modified
      • * property Modified
        • on_failure, processors properties Modified
GET /_inference/{task_type}/{inference_id}
  • Operation is now Technical preview
  • Operation is no longer beta
  • Response
  • 200 response Modified
    • application/json content type Modified
      • endpoints property Modified
        • task_settings property Modified
          • Property is no longer required
GET /_inference/{inference_id}
  • Operation is now Technical preview
  • Operation is no longer beta
  • Response
  • 200 response Modified
    • application/json content type Modified
      • endpoints property Modified
        • task_settings property Modified
          • Property is no longer required
GET /_inference
  • Operation is now Technical preview
  • Operation is no longer beta
  • Response
  • 200 response Modified
    • application/json content type Modified
      • endpoints property Modified
        • task_settings property Modified
          • Property is no longer required
PUT /_security/api_key
  • Operation is now Added in 6.7.0
  • Operation is no longer beta
  • Body
  • application/json content type Modified
    • role_descriptors property Modified
      • * property Modified
        • indices property Modified
PUT /_security/api_key/{id}
  • Operation is now Added in 8.4.0
  • Operation is no longer beta
  • Body
  • application/json content type Modified
    • role_descriptors property Modified
      • * property Modified
        • indices property Modified
Removed 4
DELETE /_data_stream/{name}/_lifecycle
GET /_enrich/_stats
POST /_template/{name}
PUT /_template/{name}
Added 6
PUT /_security/role/{name}
POST /_security/role/{name}
GET /_security/role/{name}
GET /_security/role
GET /_security/privilege/_builtin
DELETE /_security/role/{name}
Kibana Serverless API

This update adds the security and spaces endpoints.

344 structure changes including:
241 Additions
103 Removals
Removed 103
GET /api/fleet/agents/{agentId}/uploads
GET /api/fleet/data_streams
GET /api/fleet/enrollment-api-keys
GET /api/fleet/enrollment-api-keys/{keyId}
GET /api/fleet/enrollment_api_keys
GET /api/fleet/enrollment_api_keys/{keyId}
GET /api/fleet/epm/categories
GET /api/fleet/epm/packages
GET /api/fleet/epm/packages/limited
GET /api/fleet/epm/packages/{pkgName}/stats
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}/{filePath}
GET /api/fleet/epm/packages/{pkgkey}
GET /api/fleet/epm/templates/{pkgName}/{pkgVersion}/inputs
GET /api/fleet/epm/verification_key_id
GET /api/fleet/fleet_server_hosts
GET /api/fleet/fleet_server_hosts/{itemId}
GET /api/fleet/kubernetes
GET /api/fleet/outputs
GET /api/fleet/outputs/{outputId}
GET /api/fleet/outputs/{outputId}/health
GET /api/fleet/package_policies
GET /api/fleet/package_policies/{packagePolicyId}
GET /api/fleet/proxies
GET /api/fleet/proxies/{itemId}
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}
DELETE /api/fleet/agent_download_sources/{sourceId}
DELETE /api/fleet/agents/files/{fileId}
DELETE /api/fleet/agents/{agentId}
DELETE /api/fleet/enrollment-api-keys/{keyId}
DELETE /api/fleet/enrollment_api_keys/{keyId}
DELETE /api/fleet/epm/packages/{pkgName}/{pkgVersion}
DELETE /api/fleet/epm/packages/{pkgkey}
DELETE /api/fleet/fleet_server_hosts/{itemId}
DELETE /api/fleet/outputs/{outputId}
DELETE /api/fleet/package_policies/{packagePolicyId}
DELETE /api/fleet/proxies/{itemId}
GET /api/fleet/agent-status
GET /api/fleet/agent_download_sources
GET /api/fleet/agent_download_sources/{sourceId}
GET /api/fleet/agent_policies
GET /api/fleet/agent_policies/{agentPolicyId}
GET /api/fleet/agent_policies/{agentPolicyId}/download
GET /api/fleet/agent_policies/{agentPolicyId}/full
GET /api/fleet/agent_status
GET /api/fleet/agent_status/data
GET /api/fleet/agents
GET /api/fleet/agents/action_status
GET /api/fleet/agents/files/{fileId}/{fileName}
GET /api/fleet/agents/setup
GET /api/fleet/agents/tags
GET /api/fleet/agents/{agentId}
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}/transforms/authorize
POST /api/fleet/epm/packages/{pkgkey}
POST /api/fleet/fleet_server_hosts
POST /api/fleet/health_check
POST /api/fleet/logstash_api_keys
POST /api/fleet/outputs
POST /api/fleet/package_policies
POST /api/fleet/package_policies/_bulk_get
POST /api/fleet/package_policies/delete
POST /api/fleet/package_policies/upgrade
POST /api/fleet/package_policies/upgrade/dryrun
POST /api/fleet/proxies
POST /api/fleet/service-tokens
POST /api/fleet/service_tokens
POST /api/fleet/setup
PUT /api/fleet/agent_download_sources/{sourceId}
PUT /api/fleet/agent_policies/{agentPolicyId}
PUT /api/fleet/agents/{agentId}
PUT /api/fleet/agents/{agentId}/reassign
PUT /api/fleet/epm/packages/{pkgName}/{pkgVersion}
PUT /api/fleet/fleet_server_hosts/{itemId}
PUT /api/fleet/outputs/{outputId}
PUT /api/fleet/package_policies/{packagePolicyId}
PUT /api/fleet/proxies/{itemId}
PUT /api/fleet/settings
GET /api/fleet/settings
GET /api/fleet/uninstall_tokens
GET /api/fleet/uninstall_tokens/{uninstallTokenId}
POST /api/fleet/agent_download_sources
POST /api/fleet/agent_policies
POST /api/fleet/agent_policies/_bulk_get
POST /api/fleet/agent_policies/delete
POST /api/fleet/agent_policies/{agentPolicyId}/copy
POST /api/fleet/agents
POST /api/fleet/agents/actions/{actionId}/cancel
POST /api/fleet/agents/bulk_reassign
POST /api/fleet/agents/bulk_request_diagnostics
POST /api/fleet/agents/bulk_unenroll
POST /api/fleet/epm/packages/_bulk
POST /api/fleet/epm/packages
POST /api/fleet/epm/bulk_assets
POST /api/fleet/enrollment_api_keys
POST /api/fleet/enrollment-api-keys
POST /api/fleet/agents/{agentId}/upgrade
POST /api/fleet/agents/{agentId}/unenroll
POST /api/fleet/agents/{agentId}/request_diagnostics
POST /api/fleet/agents/{agentId}/reassign
POST /api/fleet/agents/{agentId}/actions
POST /api/fleet/agents/setup
POST /api/fleet/agents/bulk_upgrade
POST /api/fleet/agents/bulk_update_agent_tags
Added 241
POST /api/fleet/agents/bulk_reassign
POST /api/fleet/fleet_server_hosts
POST /api/fleet/health_check
POST /api/fleet/logstash_api_keys
POST /api/fleet/message_signing_service/rotate_key_pair
POST /api/fleet/outputs
POST /api/fleet/package_policies
POST /api/fleet/package_policies/_bulk_get
POST /api/fleet/package_policies/delete
POST /api/fleet/package_policies/upgrade
POST /api/fleet/package_policies/upgrade/dryrun
POST /api/fleet/proxies
POST /api/fleet/service_tokens
POST /api/fleet/setup
POST /api/lists
POST /api/lists/index
POST /api/lists/items
POST /api/lists/items/_export
POST /api/fleet/agents/bulk_request_diagnostics
POST /api/fleet/agents/bulk_unenroll
POST /api/fleet/agents/bulk_update_agent_tags
POST /api/fleet/agents/bulk_upgrade
POST /api/fleet/agents/setup
POST /api/fleet/agents/{agentId}/actions
POST /api/fleet/agents/{agentId}/reassign
POST /api/fleet/agents/{agentId}/request_diagnostics
POST /api/fleet/agents/{agentId}/unenroll
POST /api/fleet/agents/{agentId}/upgrade
POST /api/fleet/enrollment_api_keys
POST /api/fleet/epm/bulk_assets
POST /api/fleet/epm/custom_integrations
POST /api/fleet/epm/packages
POST /api/fleet/epm/packages/_bulk
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}/transforms/authorize
PUT /api/exception_lists
PUT /api/exception_lists/items
PUT /api/fleet/agent_download_sources/{sourceId}
PUT /api/fleet/agent_policies/{agentPolicyId}
PUT /api/fleet/agents/{agentId}
PUT /api/fleet/epm/packages/{pkgName}/{pkgVersion}
PUT /api/fleet/fleet_server_hosts/{itemId}
PUT /api/fleet/outputs/{outputId}
PUT /api/fleet/package_policies/{packagePolicyId}
PUT /api/fleet/proxies/{itemId}
PUT /api/fleet/settings
PUT /api/lists
PUT /api/lists/items
PUT /api/osquery/packs/{id}
PUT /api/osquery/saved_queries/{id}
PUT /api/security_ai_assistant/current_user/conversations/{id}
PUT /api/spaces/space/{id}
POST /api/lists/items/_import
POST /api/osquery/live_queries
POST /api/osquery/packs
POST /api/osquery/saved_queries
POST /api/risk_score/engine/schedule_now
POST /api/security_ai_assistant/anonymization_fields/_bulk_action
POST /api/security_ai_assistant/chat/complete
POST /api/security_ai_assistant/current_user/conversations
POST /api/security_ai_assistant/prompts/_bulk_action
POST /api/spaces/space
POST /api/timeline
POST /api/timeline/_draft
POST /api/timeline/_export
POST /api/timeline/_import
POST /api/timeline/_prepackaged
PUT /api/detection_engine/rules
PUT /api/endpoint_list/items
GET /api/fleet/fleet_server_hosts/{itemId}
GET /api/fleet/agents/action_status
GET /api/fleet/agents
GET /api/fleet/agent_status/data
GET /api/fleet/agent_status
GET /api/fleet/agent_policies/{agentPolicyId}/full
GET /api/fleet/agent_policies/{agentPolicyId}/download
GET /api/fleet/agent_policies/{agentPolicyId}
GET /api/fleet/agent_policies
GET /api/fleet/agent_download_sources/{sourceId}
GET /api/fleet/agent_download_sources
GET /api/exception_lists/summary
GET /api/exception_lists/items/_find
GET /api/exception_lists/items
GET /api/exception_lists/_find
GET /api/exception_lists
GET /api/entity_store/entities/list
GET /api/entity_store/engines/{entityType}
GET /api/entity_store/engines
GET /api/endpoint_list/items/_find
GET /api/endpoint_list/items
GET /api/endpoint/protection_updates_note/{package_policy_id}
GET /api/fleet/fleet_server_hosts
GET /api/fleet/epm/verification_key_id
GET /api/fleet/epm/templates/{pkgName}/{pkgVersion}/inputs
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}/{filePath*}
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}
GET /api/fleet/epm/packages/{pkgName}/stats
GET /api/fleet/epm/packages/limited
GET /api/fleet/epm/packages/installed
GET /api/fleet/epm/packages
GET /api/fleet/epm/data_streams
GET /api/fleet/epm/categories
GET /api/fleet/enrollment_api_keys/{keyId}
GET /api/fleet/enrollment_api_keys
GET /api/fleet/data_streams
GET /api/fleet/check-permissions
GET /api/fleet/agents/{agentId}/uploads
GET /api/fleet/agents/{agentId}
GET /api/fleet/agents/tags
GET /api/fleet/agents/setup
GET /api/fleet/agents/files/{fileId}/{fileName}
GET /api/fleet/agents/available_versions
GET /api/endpoint/policy_response
DELETE /api/osquery/saved_queries/{id}
DELETE /api/osquery/packs/{id}
DELETE /api/note
DELETE /api/lists/items
DELETE /api/lists/index
DELETE /api/lists
DELETE /api/fleet/proxies/{itemId}
DELETE /api/fleet/package_policies/{packagePolicyId}
DELETE /api/fleet/outputs/{outputId}
DELETE /api/fleet/fleet_server_hosts/{itemId}
DELETE /api/fleet/epm/packages/{pkgName}/{pkgVersion}
DELETE /api/fleet/enrollment_api_keys/{keyId}
DELETE /api/fleet/agents/{agentId}
DELETE /api/fleet/agents/files/{fileId}
DELETE /api/fleet/agent_download_sources/{sourceId}
DELETE /api/exception_lists/items
DELETE /api/exception_lists
DELETE /api/entity_store/engines/{entityType}
DELETE /api/endpoint_list/items
DELETE /api/detection_engine/rules
DELETE /api/asset_criticality
GET /api/endpoint/policy/summaries
GET /api/endpoint/metadata/{id}
GET /api/endpoint/metadata/transforms
GET /api/endpoint/metadata
GET /api/endpoint/action_status
GET /api/endpoint/action_log/{agent_id}
GET /api/endpoint/action/{action_id}/file/{file_id}/download
GET /api/endpoint/action/{action_id}/file/{file_id}
GET /api/endpoint/action/{action_id}
GET /api/endpoint/action/state
GET /api/endpoint/action
GET /api/detection_engine/tags
GET /api/detection_engine/rules/_find
GET /api/detection_engine/rules
GET /api/detection_engine/privileges
GET /api/asset_criticality/list
GET /api/asset_criticality
DELETE /api/timeline
DELETE /api/spaces/space/{id}
DELETE /api/security_ai_assistant/current_user/conversations/{id}
DELETE /api/risk_score/engine/dangerously_delete_data
POST /api/fleet/agents/actions/{actionId}/cancel
POST /api/endpoint/action/unisolate
POST /api/endpoint/action/suspend_process
POST /api/endpoint/action/scan
POST /api/endpoint/action/running_procs
POST /api/endpoint/action/kill_process
POST /api/endpoint/action/isolate
POST /api/endpoint/action/get_file
POST /api/endpoint/action/execute
POST /api/detection_engine/signals/tags
POST /api/detection_engine/signals/status
POST /api/detection_engine/signals/search
POST /api/detection_engine/signals/assignees
POST /api/detection_engine/rules/{id}/exceptions
POST /api/detection_engine/rules/preview
POST /api/detection_engine/rules/_import
POST /api/detection_engine/rules/_export
POST /api/detection_engine/rules/_bulk_action
POST /api/detection_engine/rules
POST /api/asset_criticality/bulk
POST /api/asset_criticality
PATCH /api/timeline/_favorite
POST /api/fleet/agents
POST /api/fleet/agent_policies/{agentPolicyId}/copy
POST /api/fleet/agent_policies/delete
POST /api/fleet/agent_policies/_bulk_get
POST /api/fleet/agent_policies
POST /api/fleet/agent_download_sources
POST /api/exceptions/shared
POST /api/exception_lists/items
POST /api/exception_lists/_import
POST /api/exception_lists/_export
POST /api/exception_lists/_duplicate
POST /api/exception_lists
POST /api/entity_store/engines/{entityType}/stop
POST /api/entity_store/engines/{entityType}/stats
POST /api/entity_store/engines/{entityType}/start
POST /api/entity_store/engines/{entityType}/init
POST /api/endpoint_list/items
POST /api/endpoint_list
POST /api/endpoint/suggestions/{suggestion_type}
POST /api/endpoint/protection_updates_note/{package_policy_id}
POST /api/endpoint/action/upload
PATCH /api/timeline
GET /api/osquery/live_queries/{id}
GET /api/osquery/live_queries
GET /api/note
GET /api/lists/privileges
GET /api/lists/items/_find
GET /api/lists/items
GET /api/lists/index
GET /api/lists/_find
GET /api/lists
GET /api/fleet/uninstall_tokens/{uninstallTokenId}
GET /api/fleet/uninstall_tokens
GET /api/fleet/settings
GET /api/fleet/proxies/{itemId}
GET /api/fleet/proxies
GET /api/fleet/package_policies/{packagePolicyId}
GET /api/fleet/package_policies
GET /api/fleet/outputs/{outputId}/health
GET /api/fleet/outputs/{outputId}
GET /api/fleet/outputs
GET /api/fleet/kubernetes/download
GET /api/fleet/kubernetes
PATCH /api/pinned_event
PATCH /api/note
PATCH /api/lists/items
PATCH /api/lists
PATCH /api/detection_engine/rules
GET /api/timelines
GET /api/timeline/resolve
GET /api/timeline/_draft
GET /api/timeline/_copy
GET /api/timeline
GET /api/spaces/space/{id}
GET /api/spaces/space
GET /api/security_ai_assistant/prompts/_find
GET /api/security_ai_assistant/current_user/conversations/{id}
GET /api/security_ai_assistant/current_user/conversations/_find
GET /api/security_ai_assistant/anonymization_fields/_find
GET /api/osquery/saved_queries/{id}
GET /api/osquery/saved_queries
GET /api/osquery/packs/{id}
GET /api/osquery/packs
GET /api/osquery/live_queries/{id}/results/{actionId}
Elasticsearch Serverless API

The APIs are grouped differently now: we've added tags that align more closely with the old documentation.

57 structure changes including:
55 Modifications
2 Removals
Modified 55
GET /_analyze
  • Body
  • application/json content type Modified
    • filter property Modified
      • analysis:KeywordMarkerTokenFilter alternative Modified
        • keywords property Modified
          • Combinator is now oneOf
    • tokenizer property Modified
      • analysis:EdgeNGramTokenizer alternative Modified
        • max_gram, min_gram properties Modified
          • Properties are no longer required
      • analysis:KeywordTokenizer alternative Modified
        • buffer_size property Modified
          • Property is no longer required
      • analysis:NGramTokenizer alternative Modified
        • max_gram, min_gram properties Modified
          • Properties are no longer required
GET /_application/search_application/{name}/_search
  • Response
  • 200 response Modified
    • application/json content type Modified
      • hits property Modified
        • hits property Modified
      • profile property Modified
        • shards property Modified
GET /_async_search/{id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • response property Modified
        • hits, profile properties Modified
GET /_ingest/pipeline
  • Response
  • 200 response Modified
    • application/json content type Modified
      • * property Modified
        • on_failure, processors properties Modified
GET /_ingest/pipeline/_simulate
  • Body
  • application/json content type Modified
    • pipeline property Modified
      • on_failure property Modified
        • redact property Modified
      • processors property Modified
        • redact property Modified
  • Response
  • 200 response Modified
    • application/json content type Modified
      • docs property Modified
        • doc, processor_results properties Modified
GET /_ingest/pipeline/{id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • * property Modified
        • on_failure, processors properties Modified
GET /_ingest/pipeline/{id}/_simulate
  • Body
  • application/json content type Modified
    • pipeline property Modified
      • on_failure property Modified
        • redact property Modified
      • processors property Modified
        • redact property Modified
  • Response
  • 200 response Modified
    • application/json content type Modified
      • docs property Modified
        • doc, processor_results properties Modified
GET /_ml/anomaly_detectors
  • Response
  • 200 response Modified
    • application/json content type Modified
      • jobs property Modified
        • analysis_config property Modified
GET /_ml/anomaly_detectors/{job_id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • jobs property Modified
        • analysis_config property Modified
GET /_ml/calendars/{calendar_id}/events
  • Response
  • 200 response Modified
    • application/json content type Modified
      • events property Modified
        • skip_result, skip_model_update, force_time_shift properties Added
GET /_ml/datafeeds/_preview
  • Body
  • application/json content type Modified
    • job_config property Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
GET /_ml/datafeeds/{datafeed_id}/_preview
  • Body
  • application/json content type Modified
    • job_config property Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
GET /_msearch
  • Response
  • 200 response Modified
    • application/json content type Modified
      • responses property Modified
        • msearch:MultiSearchItem alternative Modified
GET /_msearch/template
  • Response
  • 200 response Modified
    • application/json content type Modified
      • responses property Modified
        • msearch:MultiSearchItem alternative Modified
GET /_refresh
  • Response
  • 200 response Modified
    • application/json content type Modified
      • _shards property Modified
        • Property is no longer required
GET /_search
  • Response
  • 200 response Modified
    • application/json content type Modified
      • hits property Modified
        • hits property Modified
      • profile property Modified
        • shards property Modified
GET /_search/scroll
  • Response
  • 200 response Modified
    • application/json content type Modified
      • hits property Modified
        • hits property Modified
      • profile property Modified
        • shards property Modified
GET /_search/scroll/{scroll_id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • hits property Modified
        • hits property Modified
      • profile property Modified
        • shards property Modified
GET /_search/template
  • Response
  • 200 response Modified
    • application/json content type Modified
      • hits property Modified
        • hits property Modified
      • profile property Modified
        • shards property Modified
GET /{index}/_analyze
  • Body
  • application/json content type Modified
    • filter property Modified
      • analysis:KeywordMarkerTokenFilter alternative Modified
        • keywords property Modified
          • Combinator is now oneOf
    • tokenizer property Modified
      • analysis:EdgeNGramTokenizer alternative Modified
        • max_gram, min_gram properties Modified
          • Properties are no longer required
      • analysis:KeywordTokenizer alternative Modified
        • buffer_size property Modified
          • Property is no longer required
      • analysis:NGramTokenizer alternative Modified
        • max_gram, min_gram properties Modified
          • Properties are no longer required
GET /{index}/_msearch
  • Response
  • 200 response Modified
    • application/json content type Modified
      • responses property Modified
        • msearch:MultiSearchItem alternative Modified
GET /{index}/_msearch/template
  • Response
  • 200 response Modified
    • application/json content type Modified
      • responses property Modified
        • msearch:MultiSearchItem alternative Modified
GET /{index}/_refresh
  • Response
  • 200 response Modified
    • application/json content type Modified
      • _shards property Modified
        • Property is no longer required
GET /{index}/_search
  • Response
  • 200 response Modified
    • application/json content type Modified
      • hits property Modified
        • hits property Modified
      • profile property Modified
        • shards property Modified
GET /{index}/_search/template
  • Response
  • 200 response Modified
    • application/json content type Modified
      • hits property Modified
        • hits property Modified
      • profile property Modified
        • shards property Modified
POST /_analyze
  • Body
  • application/json content type Modified
    • filter property Modified
      • analysis:KeywordMarkerTokenFilter alternative Modified
        • keywords property Modified
          • Combinator is now oneOf
    • tokenizer property Modified
      • analysis:EdgeNGramTokenizer alternative Modified
        • max_gram, min_gram properties Modified
          • Properties are no longer required
      • analysis:KeywordTokenizer alternative Modified
        • buffer_size property Modified
          • Property is no longer required
      • analysis:NGramTokenizer alternative Modified
        • max_gram, min_gram properties Modified
          • Properties are no longer required
POST /_application/search_application/{name}/_search
  • Response
  • 200 response Modified
    • application/json content type Modified
      • hits property Modified
        • hits property Modified
      • profile property Modified
        • shards property Modified
POST /_async_search
  • Response
  • 200 response Modified
    • application/json content type Modified
      • response property Modified
        • hits, profile properties Modified
POST /_index_template/_simulate
  • Body
  • application/json content type Modified
    • data_stream property Modified
      • allow_custom_routing property Added
POST /_index_template/_simulate/{name}
  • Body
  • application/json content type Modified
    • data_stream property Modified
      • allow_custom_routing property Added
POST /_index_template/{name}
  • Body
  • application/json content type Modified
    • data_stream property Modified
      • allow_custom_routing property Added
POST /_ingest/pipeline/_simulate
  • Body
  • application/json content type Modified
    • pipeline property Modified
      • on_failure property Modified
        • redact property Modified
      • processors property Modified
        • redact property Modified
  • Response
  • 200 response Modified
    • application/json content type Modified
      • docs property Modified
        • doc, processor_results properties Modified
POST /_ingest/pipeline/{id}/_simulate
  • Body
  • application/json content type Modified
    • pipeline property Modified
      • on_failure property Modified
        • redact property Modified
      • processors property Modified
        • redact property Modified
  • Response
  • 200 response Modified
    • application/json content type Modified
      • docs property Modified
        • doc, processor_results properties Modified
POST /_ml/anomaly_detectors/_estimate_model_memory
  • Body
  • application/json content type Modified
    • analysis_config property Modified
      • categorization_analyzer property Modified
        • _types:CategorizationAnalyzerDefinition alternative Modified
POST /_ml/anomaly_detectors/{job_id}/_update
  • Response
  • 200 response Modified
    • application/json content type Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
POST /_ml/calendars/{calendar_id}/events
  • Body
  • application/json content type Modified
    • events property Modified
      • skip_result, skip_model_update, force_time_shift properties Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • events property Modified
        • skip_result, skip_model_update, force_time_shift properties Added
POST /_ml/datafeeds/_preview
  • Body
  • application/json content type Modified
    • job_config property Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
POST /_ml/datafeeds/{datafeed_id}/_preview
  • Body
  • application/json content type Modified
    • job_config property Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
POST /_msearch
  • Response
  • 200 response Modified
    • application/json content type Modified
      • responses property Modified
        • msearch:MultiSearchItem alternative Modified
POST /_msearch/template
  • Response
  • 200 response Modified
    • application/json content type Modified
      • responses property Modified
        • msearch:MultiSearchItem alternative Modified
POST /_refresh
  • Response
  • 200 response Modified
    • application/json content type Modified
      • _shards property Modified
        • Property is no longer required
POST /_search
  • Response
  • 200 response Modified
    • application/json content type Modified
      • hits property Modified
        • hits property Modified
      • profile property Modified
        • shards property Modified
POST /_search/scroll
  • Response
  • 200 response Modified
    • application/json content type Modified
      • hits property Modified
        • hits property Modified
      • profile property Modified
        • shards property Modified
POST /_search/scroll/{scroll_id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • hits property Modified
        • hits property Modified
      • profile property Modified
        • shards property Modified
POST /_search/template
  • Response
  • 200 response Modified
    • application/json content type Modified
      • hits property Modified
        • hits property Modified
      • profile property Modified
        • shards property Modified
POST /{index}/_analyze
  • Body
  • application/json content type Modified
    • filter property Modified
      • analysis:KeywordMarkerTokenFilter alternative Modified
        • keywords property Modified
          • Combinator is now oneOf
    • tokenizer property Modified
      • analysis:EdgeNGramTokenizer alternative Modified
        • max_gram, min_gram properties Modified
          • Properties are no longer required
      • analysis:KeywordTokenizer alternative Modified
        • buffer_size property Modified
          • Property is no longer required
      • analysis:NGramTokenizer alternative Modified
        • max_gram, min_gram properties Modified
          • Properties are no longer required
POST /{index}/_async_search
  • Response
  • 200 response Modified
    • application/json content type Modified
      • response property Modified
        • hits, profile properties Modified
POST /{index}/_msearch
  • Response
  • 200 response Modified
    • application/json content type Modified
      • responses property Modified
        • msearch:MultiSearchItem alternative Modified
POST /{index}/_msearch/template
  • Response
  • 200 response Modified
    • application/json content type Modified
      • responses property Modified
        • msearch:MultiSearchItem alternative Modified
POST /{index}/_refresh
  • Response
  • 200 response Modified
    • application/json content type Modified
      • _shards property Modified
        • Property is no longer required
POST /{index}/_search
  • Response
  • 200 response Modified
    • application/json content type Modified
      • hits property Modified
        • hits property Modified
      • profile property Modified
        • shards property Modified
POST /{index}/_search/template
  • Response
  • 200 response Modified
    • application/json content type Modified
      • hits property Modified
        • hits property Modified
      • profile property Modified
        • shards property Modified
PUT /_index_template/{name}
  • Body
  • application/json content type Modified
    • data_stream property Modified
      • allow_custom_routing property Added
PUT /_ingest/pipeline/{id}
  • Body
  • application/json content type Modified
    • on_failure property Modified
      • redact property Modified
        • trace_redact property Added
    • processors property Modified
      • redact property Modified
        • trace_redact property Added
PUT /_ml/anomaly_detectors/{job_id}
  • Body
  • application/json content type Modified
    • analysis_config property Modified
      • categorization_analyzer property Modified
        • _types:CategorizationAnalyzerDefinition alternative Modified
  • Response
  • 200 response Modified
    • application/json content type Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
Removed 2
GET /_data_stream/_stats
GET /_data_stream/{name}/_stats
Elastic Cloud Serverless API
2 structure changes including:
2 Modifications
Modified 2 Breaking
GET /api/v1/serverless/projects/observability/{id}/roles
  • Response
  • 200 response Modified
    • application/json content type Modified
      • * property Modified
        • * property Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
        • roles property Added
GET /api/v1/serverless/projects/security/{id}/roles
  • Response
  • 200 response Modified
    • application/json content type Modified
      • * property Modified
        • * property Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
        • roles property Added
Kibana API

This documentation update aligns with 8.15.2. The Fleet API changes fix a documentation error (https://github.com/elastic/kibana/pull/192652).

105 structure changes including:
94 Breaking changes
104 Modifications
1 Removal
Modified 104 Breaking
DELETE /api/fleet/agent_download_sources/{sourceId}
  • Path went from /agent_download_sources/{sourceId} to /api/fleet/agent_download_sources/{sourceId} (same operationId)
    Breaking
DELETE /api/fleet/agents/files/{fileId}
  • Path went from /agents/files/{fileId} to /api/fleet/agents/files/{fileId} (same operationId)
    Breaking
DELETE /api/fleet/agents/{agentId}
  • Path went from /agents/{agentId} to /api/fleet/agents/{agentId} (same operationId)
    Breaking
DELETE /api/fleet/enrollment-api-keys/{keyId}
  • Path went from /enrollment-api-keys/{keyId} to /api/fleet/enrollment-api-keys/{keyId} (same operationId)
DELETE /api/fleet/enrollment_api_keys/{keyId}
  • Path went from /enrollment_api_keys/{keyId} to /api/fleet/enrollment_api_keys/{keyId} (same operationId)
    Breaking
DELETE /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Path went from /epm/packages/{pkgName}/{pkgVersion} to /api/fleet/epm/packages/{pkgName}/{pkgVersion} (same operationId)
    Breaking
DELETE /api/fleet/epm/packages/{pkgkey}
  • Path went from /epm/packages/{pkgkey} to /api/fleet/epm/packages/{pkgkey} (same operationId)
DELETE /api/fleet/fleet_server_hosts/{itemId}
  • Path went from /fleet_server_hosts/{itemId} to /api/fleet/fleet_server_hosts/{itemId} (same operationId)
    Breaking
DELETE /api/fleet/outputs/{outputId}
  • Path went from /outputs/{outputId} to /api/fleet/outputs/{outputId} (same operationId)
    Breaking
DELETE /api/fleet/package_policies/{packagePolicyId}
  • Path went from /package_policies/{packagePolicyId} to /api/fleet/package_policies/{packagePolicyId} (same operationId)
    Breaking
DELETE /api/fleet/proxies/{itemId}
  • Path went from /proxies/{itemId} to /api/fleet/proxies/{itemId} (same operationId)
    Breaking
GET /api/fleet/agent-status
  • Path went from /agent-status to /api/fleet/agent-status (same operationId)
GET /api/fleet/agent_download_sources
  • Path went from /agent_download_sources to /api/fleet/agent_download_sources (same operationId)
    Breaking
GET /api/fleet/agent_download_sources/{sourceId}
  • Path went from /agent_download_sources/{sourceId} to /api/fleet/agent_download_sources/{sourceId} (same operationId)
    Breaking
GET /api/fleet/agent_policies
  • Path went from /agent_policies to /api/fleet/agent_policies (same operationId)
    Breaking
GET /api/fleet/agent_policies/{agentPolicyId}
  • Path went from /agent_policies/{agentPolicyId} to /api/fleet/agent_policies/{agentPolicyId} (same operationId)
    Breaking
GET /api/fleet/agent_policies/{agentPolicyId}/download
  • Path went from /agent_policies/{agentPolicyId}/download to /api/fleet/agent_policies/{agentPolicyId}/download (same operationId)
    Breaking
GET /api/fleet/agent_policies/{agentPolicyId}/full
  • Path went from /agent_policies/{agentPolicyId}/full to /api/fleet/agent_policies/{agentPolicyId}/full (same operationId)
    Breaking
GET /api/fleet/agent_status
  • Path went from /agent_status to /api/fleet/agent_status (same operationId)
    Breaking
GET /api/fleet/agent_status/data
  • Path went from /agent_status/data to /api/fleet/agent_status/data (same operationId)
    Breaking
GET /api/fleet/agents
  • Path went from /agents to /api/fleet/agents (same operationId)
    Breaking
GET /api/fleet/agents/action_status
  • Path went from /agents/action_status to /api/fleet/agents/action_status (same operationId)
    Breaking
GET /api/fleet/agents/files/{fileId}/{fileName}
  • Path went from /agents/files/{fileId}/{fileName} to /api/fleet/agents/files/{fileId}/{fileName} (same operationId)
    Breaking
GET /api/fleet/agents/setup
  • Path went from /agents/setup to /api/fleet/agents/setup (same operationId)
    Breaking
GET /api/fleet/agents/tags
  • Path went from /agents/tags to /api/fleet/agents/tags (same operationId)
    Breaking
GET /api/fleet/agents/{agentId}
  • Path went from /agents/{agentId} to /api/fleet/agents/{agentId} (same operationId)
    Breaking
GET /api/fleet/agents/{agentId}/uploads
  • Path went from /agents/{agentId}/uploads to /api/fleet/agents/{agentId}/uploads (same operationId)
    Breaking
GET /api/fleet/data_streams
  • Path went from /data_streams to /api/fleet/data_streams (same operationId)
    Breaking
GET /api/fleet/enrollment-api-keys
  • Path went from /enrollment-api-keys to /api/fleet/enrollment-api-keys (same operationId)
GET /api/fleet/enrollment-api-keys/{keyId}
  • Path went from /enrollment-api-keys/{keyId} to /api/fleet/enrollment-api-keys/{keyId} (same operationId)
GET /api/fleet/enrollment_api_keys
  • Path went from /enrollment_api_keys to /api/fleet/enrollment_api_keys (same operationId)
    Breaking
GET /api/fleet/enrollment_api_keys/{keyId}
  • Path went from /enrollment_api_keys/{keyId} to /api/fleet/enrollment_api_keys/{keyId} (same operationId)
    Breaking
GET /api/fleet/epm/categories
  • Path went from /epm/categories to /api/fleet/epm/categories (same operationId)
    Breaking
GET /api/fleet/epm/packages
  • Path went from /epm/packages to /api/fleet/epm/packages (same operationId)
    Breaking
GET /api/fleet/epm/packages/limited
  • Path went from /epm/packages/limited to /api/fleet/epm/packages/limited (same operationId)
    Breaking
GET /api/fleet/epm/packages/{pkgName}/stats
  • Path went from /epm/packages/{pkgName}/stats to /api/fleet/epm/packages/{pkgName}/stats (same operationId)
    Breaking
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Path went from /epm/packages/{pkgName}/{pkgVersion} to /api/fleet/epm/packages/{pkgName}/{pkgVersion} (same operationId)
    Breaking
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}/{filePath}
  • Path went from /epm/packages/{pkgName}/{pkgVersion}/{filePath} to /api/fleet/epm/packages/{pkgName}/{pkgVersion}/{filePath} (same operationId)
    Breaking
GET /api/fleet/epm/packages/{pkgkey}
  • Path went from /epm/packages/{pkgkey} to /api/fleet/epm/packages/{pkgkey} (same operationId)
GET /api/fleet/epm/templates/{pkgName}/{pkgVersion}/inputs
  • Path went from /epm/templates/{pkgName}/{pkgVersion}/inputs to /api/fleet/epm/templates/{pkgName}/{pkgVersion}/inputs (same operationId)
    Breaking
GET /api/fleet/epm/verification_key_id
  • Path went from /epm/verification_key_id to /api/fleet/epm/verification_key_id (same operationId)
    Breaking
GET /api/fleet/fleet_server_hosts
  • Path went from /fleet_server_hosts to /api/fleet/fleet_server_hosts (same operationId)
    Breaking
GET /api/fleet/fleet_server_hosts/{itemId}
  • Path went from /fleet_server_hosts/{itemId} to /api/fleet/fleet_server_hosts/{itemId} (same operationId)
    Breaking
GET /api/fleet/kubernetes
  • Path went from /kubernetes to /api/fleet/kubernetes (same operationId)
    Breaking
GET /api/fleet/outputs
  • Path went from /outputs to /api/fleet/outputs (same operationId)
    Breaking
GET /api/fleet/outputs/{outputId}
  • Path went from /outputs/{outputId} to /api/fleet/outputs/{outputId} (same operationId)
    Breaking
GET /api/fleet/outputs/{outputId}/health
  • Path went from /outputs/{outputId}/health to /api/fleet/outputs/{outputId}/health (same operationId)
    Breaking
GET /api/fleet/package_policies
  • Path went from /package_policies to /api/fleet/package_policies (same operationId)
    Breaking
GET /api/fleet/package_policies/{packagePolicyId}
  • Path went from /package_policies/{packagePolicyId} to /api/fleet/package_policies/{packagePolicyId} (same operationId)
    Breaking
GET /api/fleet/proxies
  • Path went from /proxies to /api/fleet/proxies (same operationId)
    Breaking
GET /api/fleet/proxies/{itemId}
  • Path went from /proxies/{itemId} to /api/fleet/proxies/{itemId} (same operationId)
    Breaking
GET /api/fleet/settings
  • Path went from /settings to /api/fleet/settings (same operationId)
    Breaking
GET /api/fleet/uninstall_tokens
  • Path went from /uninstall_tokens to /api/fleet/uninstall_tokens (same operationId)
    Breaking
GET /api/fleet/uninstall_tokens/{uninstallTokenId}
  • Path went from /uninstall_tokens/{uninstallTokenId} to /api/fleet/uninstall_tokens/{uninstallTokenId} (same operationId)
    Breaking
POST /api/actions/connector/{connectorId}/_execute
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • params property Modified
      • Connectors_run_connector_subaction_pushtoservice alternative Modified
        • subActionParams property Modified
POST /api/fleet/agent_download_sources
  • Path went from /agent_download_sources to /api/fleet/agent_download_sources (same operationId)
    Breaking
POST /api/fleet/agent_policies
  • Path went from /agent_policies to /api/fleet/agent_policies (same operationId)
    Breaking
POST /api/fleet/agent_policies/_bulk_get
  • Path went from /agent_policies/_bulk_get to /api/fleet/agent_policies/_bulk_get (same operationId)
    Breaking
POST /api/fleet/agent_policies/delete
  • Path went from /agent_policies/delete to /api/fleet/agent_policies/delete (same operationId)
    Breaking
POST /api/fleet/agent_policies/{agentPolicyId}/copy
  • Path went from /agent_policies/{agentPolicyId}/copy to /api/fleet/agent_policies/{agentPolicyId}/copy (same operationId)
    Breaking
POST /api/fleet/agents
  • Path went from /agents to /api/fleet/agents (same operationId)
    Breaking
POST /api/fleet/agents/bulk_reassign
  • Path went from /agents/bulk_reassign to /api/fleet/agents/bulk_reassign (same operationId)
    Breaking
POST /api/fleet/agents/bulk_request_diagnostics
  • Path went from /agents/bulk_request_diagnostics to /api/fleet/agents/bulk_request_diagnostics (same operationId)
    Breaking
POST /api/fleet/agents/bulk_unenroll
  • Path went from /agents/bulk_unenroll to /api/fleet/agents/bulk_unenroll (same operationId)
    Breaking
POST /api/fleet/agents/bulk_update_agent_tags
  • Path went from /agents/bulk_update_agent_tags to /api/fleet/agents/bulk_update_agent_tags (same operationId)
    Breaking
POST /api/fleet/agents/bulk_upgrade
  • Path went from /agents/bulk_upgrade to /api/fleet/agents/bulk_upgrade (same operationId)
    Breaking
POST /api/fleet/agents/setup
  • Path went from /agents/setup to /api/fleet/agents/setup (same operationId)
    Breaking
POST /api/fleet/agents/{agentId}/actions
  • Path went from /agents/{agentId}/actions to /api/fleet/agents/{agentId}/actions (same operationId)
    Breaking
POST /api/fleet/agents/{agentId}/actions/{actionId}/cancel
  • Path went from /agents/{agentId}/actions/{actionId}/cancel to /api/fleet/agents/{agentId}/actions/{actionId}/cancel (same operationId)
    Breaking
POST /api/fleet/agents/{agentId}/reassign
  • Path went from /agents/{agentId}/reassign to /api/fleet/agents/{agentId}/reassign (same operationId)
    Breaking
POST /api/fleet/agents/{agentId}/request_diagnostics
  • Path went from /agents/{agentId}/request_diagnostics to /api/fleet/agents/{agentId}/request_diagnostics (same operationId)
    Breaking
POST /api/fleet/agents/{agentId}/unenroll
  • Path went from /agents/{agentId}/unenroll to /api/fleet/agents/{agentId}/unenroll (same operationId)
    Breaking
POST /api/fleet/agents/{agentId}/upgrade
  • Path went from /agents/{agentId}/upgrade to /api/fleet/agents/{agentId}/upgrade (same operationId)
    Breaking
POST /api/fleet/enrollment-api-keys
  • Path went from /enrollment-api-keys to /api/fleet/enrollment-api-keys (same operationId)
POST /api/fleet/enrollment_api_keys
  • Path went from /enrollment_api_keys to /api/fleet/enrollment_api_keys (same operationId)
    Breaking
POST /api/fleet/epm/bulk_assets
  • Path went from /epm/bulk_assets to /api/fleet/epm/bulk_assets (same operationId)
    Breaking
POST /api/fleet/epm/packages
  • Path went from /epm/packages to /api/fleet/epm/packages (same operationId)
    Breaking
POST /api/fleet/epm/packages/_bulk
  • Path went from /epm/packages/_bulk to /api/fleet/epm/packages/_bulk (same operationId)
    Breaking
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Path went from /epm/packages/{pkgName}/{pkgVersion} to /api/fleet/epm/packages/{pkgName}/{pkgVersion} (same operationId)
    Breaking
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}/transforms/authorize
  • Path went from /epm/packages/{pkgName}/{pkgVersion}/transforms/authorize to /api/fleet/epm/packages/{pkgName}/{pkgVersion}/transforms/authorize (same operationId)
    Breaking
POST /api/fleet/epm/packages/{pkgkey}
  • Path went from /epm/packages/{pkgkey} to /api/fleet/epm/packages/{pkgkey} (same operationId)
POST /api/fleet/fleet_server_hosts
  • Path went from /fleet_server_hosts to /api/fleet/fleet_server_hosts (same operationId)
    Breaking
POST /api/fleet/health_check
  • Path went from /health_check to /api/fleet/health_check (same operationId)
    Breaking
POST /api/fleet/logstash_api_keys
  • Path went from /logstash_api_keys to /api/fleet/logstash_api_keys (same operationId)
    Breaking
POST /api/fleet/outputs
  • Path went from /outputs to /api/fleet/outputs (same operationId)
    Breaking
POST /api/fleet/package_policies
  • Path went from /package_policies to /api/fleet/package_policies (same operationId)
    Breaking
POST /api/fleet/package_policies/_bulk_get
  • Path went from /package_policies/_bulk_get to /api/fleet/package_policies/_bulk_get (same operationId)
    Breaking
POST /api/fleet/package_policies/delete
  • Path went from /package_policies/delete to /api/fleet/package_policies/delete (same operationId)
    Breaking
POST /api/fleet/package_policies/upgrade
  • Path went from /package_policies/upgrade to /api/fleet/package_policies/upgrade (same operationId)
    Breaking
POST /api/fleet/package_policies/upgrade/dryrun
  • Path went from /package_policies/upgrade/dryrun to /api/fleet/package_policies/upgrade/dryrun (same operationId)
    Breaking
POST /api/fleet/proxies
  • Path went from /proxies to /api/fleet/proxies (same operationId)
    Breaking
POST /api/fleet/service-tokens
  • Path went from /service-tokens to /api/fleet/service-tokens (same operationId)
POST /api/fleet/service_tokens
  • Path went from /service_tokens to /api/fleet/service_tokens (same operationId)
    Breaking
POST /api/fleet/setup
  • Path went from /setup to /api/fleet/setup (same operationId)
    Breaking
PUT /api/fleet/agent_download_sources/{sourceId}
  • Path went from /agent_download_sources/{sourceId} to /api/fleet/agent_download_sources/{sourceId} (same operationId)
    Breaking
PUT /api/fleet/agent_policies/{agentPolicyId}
  • Path went from /agent_policies/{agentPolicyId} to /api/fleet/agent_policies/{agentPolicyId} (same operationId)
    Breaking
PUT /api/fleet/agents/{agentId}
  • Path went from /agents/{agentId} to /api/fleet/agents/{agentId} (same operationId)
    Breaking
PUT /api/fleet/agents/{agentId}/reassign
  • Path went from /agents/{agentId}/reassign to /api/fleet/agents/{agentId}/reassign (same operationId)
PUT /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Path went from /epm/packages/{pkgName}/{pkgVersion} to /api/fleet/epm/packages/{pkgName}/{pkgVersion} (same operationId)
    Breaking
PUT /api/fleet/fleet_server_hosts/{itemId}
  • Path went from /fleet_server_hosts/{itemId} to /api/fleet/fleet_server_hosts/{itemId} (same operationId)
    Breaking
PUT /api/fleet/outputs/{outputId}
  • Path went from /outputs/{outputId} to /api/fleet/outputs/{outputId} (same operationId)
    Breaking
PUT /api/fleet/package_policies/{packagePolicyId}
  • Path went from /package_policies/{packagePolicyId} to /api/fleet/package_policies/{packagePolicyId} (same operationId)
    Breaking
PUT /api/fleet/proxies/{itemId}
  • Path went from /proxies/{itemId} to /api/fleet/proxies/{itemId} (same operationId)
    Breaking
PUT /api/fleet/settings
  • Path went from /settings to /api/fleet/settings (same operationId)
    Breaking
Removed 1 Breaking
GET /settings/enrollment
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
Kibana API
31 structure changes including:
31 Modifications
Modified 31 Breaking
DELETE /api/alerting/rule/{id}
  • Response
  • 400, 403, 404 responses Added
GET /api/actions/action/{id}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Added
GET /api/actions/connector/{id}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • Full types is now object
      • property Added
GET /api/alerting/rule/{id}
  • Response
  • 400, 403, 404 responses Added
GET /api/alerting/rules/_find
  • Response
  • 400, 403 responses Added
GET /api/fleet/agent_policies
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • items property Modified
        • monitoring_diagnostics, monitoring_http, monitoring_pprof_enabled properties Added
GET /api/fleet/agent_policies/{agentPolicyId}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • monitoring_diagnostics, monitoring_http, monitoring_pprof_enabled properties Added
GET /api/fleet/agent_policies/{agentPolicyId}/full
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • object-2 alternative Modified
GET /s/{spaceId}/api/observability/slos
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • results property Modified
        • groupBy property Modified
          • Combinator is now oneOf
GET /s/{spaceId}/api/observability/slos/{sloId}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • groupBy property Modified
        • Combinator is now oneOf
        • groupBy alternative Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
        • string-1, array-2 alternatives Added
POST /api/actions/action
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Added
POST /api/actions/action/{id}/_execute
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Added
POST /api/actions/connector/{id}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • Full types is now object
      • property Added
POST /api/actions/connector/{id}/_execute
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • params property Modified
      • run_pushtoservice alternative Modified
        • subActionParams property Modified
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • Full types is now object
      • property Added
POST /api/alerting/rule/{id}
  • Response
  • 400, 403, 409 responses Added
POST /api/alerting/rule/{id}/_disable
  • Response
  • 400, 403, 404 responses Added
POST /api/alerting/rule/{id}/_enable
  • Response
  • 400, 403, 404 responses Added
POST /api/alerting/rule/{id}/_update_api_key
  • Response
  • 400, 403, 404, 409 responses Added
POST /api/alerting/rule/{rule_id}/alert/{alert_id}/_mute
  • Response
  • 400, 403, 404 responses Added
POST /api/alerting/rule/{rule_id}/alert/{alert_id}/_unmute
  • Response
  • 400, 403, 404 responses Added
POST /api/fleet/agent_policies
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • monitoring_diagnostics, monitoring_http, monitoring_pprof_enabled properties Added
POST /api/fleet/agent_policies/_bulk_get
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • items property Modified
        • monitoring_diagnostics, monitoring_http, monitoring_pprof_enabled properties Added
POST /api/fleet/agent_policies/{agentPolicyId}/copy
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • monitoring_diagnostics, monitoring_http, monitoring_pprof_enabled properties Added
POST /s/{spaceId}/api/observability/slos
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • groupBy property Modified
      • Combinator is now oneOf
      • groupBy alternative Removed
        • Removing a resource is always breaking unless it was deprecated before
          Breaking
      • string-1, array-2 alternatives Added
POST /s/{spaceId}/api/observability/slos/{sloId}/_reset
  • Response
  • 204 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • groupBy property Modified
        • Combinator is now oneOf
        • groupBy alternative Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
        • string-1, array-2 alternatives Added
PUT /api/actions/action/{id}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Added
PUT /api/actions/connector/{id}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Added
PUT /api/alerting/rule/{id}
  • Response
  • 400, 403, 404, 409 responses Added
PUT /api/fleet/agent_policies/{agentPolicyId}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • global_data_tags property Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • monitoring_diagnostics, monitoring_http, monitoring_pprof_enabled properties Added
PUT /api/fleet/package_policies/{packagePolicyId}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • sucess property Removed
        • Removing a resource is always breaking unless it was deprecated before
          Breaking
PUT /s/{spaceId}/api/observability/slos/{sloId}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • groupBy property Added
      • string-1, array-2 properties Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • groupBy property Modified
        • Combinator is now oneOf
        • groupBy alternative Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
        • string-1, array-2 alternatives Added
Kibana Serverless API
31 structure changes including:
31 Modifications
Modified 31 Breaking
DELETE /api/alerting/rule/{id}
  • Response
  • 400, 403, 404 responses Added
GET /api/actions/action/{id}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Added
GET /api/actions/connector/{id}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • Full types is now object
      • property Added
GET /api/alerting/rule/{id}
  • Response
  • 400, 403, 404 responses Added
GET /api/alerting/rules/_find
  • Response
  • 400, 403 responses Added
GET /api/fleet/agent_policies
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • items property Modified
        • monitoring_diagnostics, monitoring_http, monitoring_pprof_enabled properties Added
GET /api/fleet/agent_policies/{agentPolicyId}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • monitoring_diagnostics, monitoring_http, monitoring_pprof_enabled properties Added
GET /api/fleet/agent_policies/{agentPolicyId}/full
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • object-2 alternative Modified
GET /s/{spaceId}/api/observability/slos
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • results property Modified
        • groupBy property Modified
          • Combinator is now oneOf
GET /s/{spaceId}/api/observability/slos/{sloId}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • groupBy property Modified
        • Combinator is now oneOf
        • groupBy alternative Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
        • string-1, array-2 alternatives Added
POST /api/actions/action
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Added
POST /api/actions/action/{id}/_execute
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Added
POST /api/actions/connector/{id}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • Full types is now object
      • property Added
POST /api/actions/connector/{id}/_execute
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • params property Modified
      • run_pushtoservice alternative Modified
        • subActionParams property Modified
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • Full types is now object
      • property Added
POST /api/alerting/rule/{id}
  • Response
  • 400, 403, 409 responses Added
POST /api/alerting/rule/{id}/_disable
  • Response
  • 400, 403, 404 responses Added
POST /api/alerting/rule/{id}/_enable
  • Response
  • 400, 403, 404 responses Added
POST /api/alerting/rule/{id}/_update_api_key
  • Response
  • 400, 403, 404, 409 responses Added
POST /api/alerting/rule/{rule_id}/alert/{alert_id}/_mute
  • Response
  • 400, 403, 404 responses Added
POST /api/alerting/rule/{rule_id}/alert/{alert_id}/_unmute
  • Response
  • 400, 403, 404 responses Added
POST /api/fleet/agent_policies
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • monitoring_diagnostics, monitoring_http, monitoring_pprof_enabled properties Added
POST /api/fleet/agent_policies/_bulk_get
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • items property Modified
        • monitoring_diagnostics, monitoring_http, monitoring_pprof_enabled properties Added
POST /api/fleet/agent_policies/{agentPolicyId}/copy
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • monitoring_diagnostics, monitoring_http, monitoring_pprof_enabled properties Added
POST /s/{spaceId}/api/observability/slos
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • groupBy property Modified
      • Combinator is now oneOf
      • groupBy alternative Removed
        • Removing a resource is always breaking unless it was deprecated before
          Breaking
      • string-1, array-2 alternatives Added
POST /s/{spaceId}/api/observability/slos/{sloId}/_reset
  • Response
  • 204 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • groupBy property Modified
        • Combinator is now oneOf
        • groupBy alternative Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
        • string-1, array-2 alternatives Added
PUT /api/actions/action/{id}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Added
PUT /api/actions/connector/{id}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Added
PUT /api/alerting/rule/{id}
  • Response
  • 400, 403, 404, 409 responses Added
PUT /api/fleet/agent_policies/{agentPolicyId}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • global_data_tags property Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • monitoring_diagnostics, monitoring_http, monitoring_pprof_enabled properties Added
PUT /api/fleet/package_policies/{packagePolicyId}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • sucess property Removed
        • Removing a resource is always breaking unless it was deprecated before
          Breaking
PUT /s/{spaceId}/api/observability/slos/{sloId}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • groupBy property Added
      • string-1, array-2 properties Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • groupBy property Modified
        • Combinator is now oneOf
        • groupBy alternative Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
        • string-1, array-2 alternatives Added
Elastic Cloud API

This documentation update aligns with the September 2024 release described in https://www.elastic.co/guide/en/cloud/current/ec-release-notes-2024-09-19.html

8 structure changes including:
8 Modifications
Modified 8
GET /deployments/templates
  • Response
  • 200 response Modified
    • content type Modified
      • deployment_template property Modified
        • settings property Modified
GET /deployments/templates/{template_id}
  • Response
  • 200 response Modified
    • content type Modified
      • deployment_template property Modified
        • settings property Modified
GET /deployments/{deployment_id}
  • Response
  • 200 response Modified
    • content type Modified
      • settings property Modified
        • solution_type property Added
POST /deployments
  • Body
  • content type Modified
    • settings property Modified
      • solution_type property Added
POST /deployments/_search
  • Response
  • 200 response Modified
    • content type Modified
      • deployments property Modified
        • settings property Modified
POST /deployments/eligible-remote-clusters
  • Response
  • 200 response Modified
    • content type Modified
      • deployments property Modified
        • settings property Modified
POST /deployments/{deployment_id}/elasticsearch/{ref_id}/eligible-remote-clusters
  • Response
  • 200 response Modified
    • content type Modified
      • deployments property Modified
        • settings property Modified
PUT /deployments/{deployment_id}
  • Response
  • 200 response Modified
    • content type Modified
      • settings property Modified
        • solution_type property Added
Elasticsearch Serverless API

This update qualifies operations as "beta" for now though they continue to be in "technical preview". It also cleans up some query and tokenizer objects that were not fully displayed.

349 structure changes including:
349 Modifications
Modified 349 Breaking
DELETE /_application/analytics/{name}
  • Operation is now beta
DELETE /_async_search/{id}
  • Operation is now beta
DELETE /_component_template/{name}
  • Operation is now beta
DELETE /_data_stream/{name}
  • Operation is now beta
DELETE /_data_stream/{name}/_lifecycle
  • Operation is now beta
DELETE /_enrich/policy/{name}
  • Operation is now beta
DELETE /_eql/search/{id}
  • Operation is now beta
DELETE /_index_template/{name}
  • Operation is now beta
DELETE /_inference/{inference_id}
  • Operation is now beta
DELETE /_inference/{task_type}/{inference_id}
  • Operation is now beta
DELETE /_ingest/pipeline/{id}
  • Operation is now beta
DELETE /_logstash/pipeline/{id}
  • Operation is now beta
DELETE /_ml/anomaly_detectors/{job_id}
  • Operation is now beta
DELETE /_ml/calendars/{calendar_id}
  • Operation is now beta
DELETE /_ml/calendars/{calendar_id}/events/{event_id}
  • Operation is now beta
DELETE /_ml/calendars/{calendar_id}/jobs/{job_id}
  • Operation is now beta
DELETE /_ml/data_frame/analytics/{id}
  • Operation is now beta
DELETE /_ml/datafeeds/{datafeed_id}
  • Operation is now beta
DELETE /_ml/filters/{filter_id}
  • Operation is now beta
DELETE /_ml/trained_models/{model_id}
  • Operation is now beta
DELETE /_ml/trained_models/{model_id}/model_aliases/{model_alias}
  • Operation is now beta
DELETE /_pit
  • Operation is now beta
DELETE /_query_rules/{ruleset_id}
  • Operation is now beta
DELETE /_query_rules/{ruleset_id}/_rule/{rule_id}
  • Operation is now beta
DELETE /_scripts/{id}
  • Operation is now beta
DELETE /_search/scroll
  • Operation is now beta
DELETE /_search/scroll/{scroll_id}
  • Operation is now beta
DELETE /_security/api_key
  • Operation is now beta
DELETE /_sql/async/delete/{id}
  • Operation is now beta
DELETE /_synonyms/{id}
  • Operation is now beta
DELETE /_synonyms/{set_id}/{rule_id}
  • Operation is now beta
DELETE /_transform/{transform_id}
  • Operation is now beta
DELETE /{index}
  • Operation is now beta
DELETE /{index}/_alias/{name}
  • Operation is now beta
DELETE /{index}/_aliases/{name}
  • Operation is now beta
DELETE /{index}/_doc/{id}
  • Operation is now beta
GET /
  • Operation is now beta
GET /_alias
  • Operation is now beta
GET /_alias/{name}
  • Operation is now beta
GET /_analyze
  • Operation is now beta
  • Body
  • application/json content type Modified
    • tokenizer property Modified
      • analysis:EdgeNGramTokenizer alternative Modified
        • token_chars property Modified
          • Property is no longer required
      • analysis:NGramTokenizer alternative Modified
        • token_chars property Modified
          • Property is no longer required
      • analysis:ClassicTokenizer, analysis:SimplePatternTokenizer, analysis:SimplePatternSplitTokenizer, analysis:ThaiTokenizer alternatives Added
GET /_application/analytics
  • Operation is now beta
GET /_application/analytics/{name}
  • Operation is now beta
GET /_async_search/status/{id}
  • Operation is now beta
GET /_async_search/{id}
  • Operation is now beta
GET /_cat
  • Operation is now beta
GET /_cat/aliases
  • Operation is now beta
GET /_cat/aliases/{name}
  • Operation is now beta
GET /_cat/component_templates
  • Operation is now beta
GET /_cat/component_templates/{name}
  • Operation is now beta
GET /_cat/count
  • Operation is now beta
GET /_cat/count/{index}
  • Operation is now beta
GET /_cat/indices
  • Operation is now beta
GET /_cat/indices/{index}
  • Operation is now beta
GET /_cat/ml/anomaly_detectors
  • Operation is now beta
GET /_cat/ml/anomaly_detectors/{job_id}
  • Operation is now beta
GET /_cat/ml/data_frame/analytics
  • Operation is now beta
GET /_cat/ml/data_frame/analytics/{id}
  • Operation is now beta
GET /_cat/ml/datafeeds
  • Operation is now beta
GET /_cat/ml/datafeeds/{datafeed_id}
  • Operation is now beta
GET /_cat/ml/trained_models
  • Operation is now beta
GET /_cat/ml/trained_models/{model_id}
  • Operation is now beta
GET /_cat/transforms
  • Operation is now beta
GET /_cat/transforms/{transform_id}
  • Operation is now beta
GET /_component_template
  • Operation is now beta
GET /_component_template/{name}
  • Operation is now beta
GET /_count
  • Operation is now beta
GET /_data_stream
  • Operation is now beta
GET /_data_stream/_stats
  • Operation is now beta
GET /_data_stream/{name}
  • Operation is now beta
GET /_data_stream/{name}/_lifecycle
  • Operation is now beta
GET /_data_stream/{name}/_stats
  • Operation is now beta
GET /_enrich/_stats
  • Operation is now beta
GET /_enrich/policy
  • Operation is now beta
GET /_enrich/policy/{name}
  • Operation is now beta
GET /_eql/search/status/{id}
  • Operation is now beta
GET /_eql/search/{id}
  • Operation is now beta
GET /_field_caps
  • Operation is now beta
GET /_index_template
  • Operation is now beta
GET /_index_template/{name}
  • Operation is now beta
GET /_inference
  • Operation is now beta
GET /_inference/{inference_id}
  • Operation is now beta
GET /_inference/{task_type}/{inference_id}
  • Operation is now beta
GET /_info/{target}
  • Operation is now beta
  • Response
  • 200 response Modified
    • application/json content type Modified
      • ingest property Modified
        • pipelines, total properties Modified
GET /_ingest/pipeline
  • Operation is now beta
GET /_ingest/pipeline/_simulate
  • Operation is now beta
GET /_ingest/pipeline/{id}
  • Operation is now beta
GET /_ingest/pipeline/{id}/_simulate
  • Operation is now beta
GET /_ingest/processor/grok
  • Operation is now beta
GET /_license
  • Operation is now beta
GET /_logstash/pipeline
  • Operation is now beta
GET /_logstash/pipeline/{id}
  • Operation is now beta
GET /_mapping
  • Operation is now beta
GET /_mget
  • Operation is now beta
GET /_ml/anomaly_detectors
  • Operation is now beta
  • Response
  • 200 response Modified
    • application/json content type Modified
      • jobs property Modified
        • analysis_config, datafeed_config properties Modified
GET /_ml/anomaly_detectors/_stats
  • Operation is now beta
GET /_ml/anomaly_detectors/{job_id}
  • Operation is now beta
  • Response
  • 200 response Modified
    • application/json content type Modified
      • jobs property Modified
        • analysis_config, datafeed_config properties Modified
GET /_ml/anomaly_detectors/{job_id}/_stats
  • Operation is now beta
GET /_ml/anomaly_detectors/{job_id}/results/overall_buckets
  • Operation is now beta
GET /_ml/calendars
  • Operation is now beta
GET /_ml/calendars/{calendar_id}
  • Operation is now beta
GET /_ml/calendars/{calendar_id}/events
  • Operation is now beta
GET /_ml/data_frame/analytics
  • Operation is now beta
  • Response
  • 200 response Modified
    • application/json content type Modified
      • data_frame_analytics property Modified
        • source property Modified
GET /_ml/data_frame/analytics/_preview
  • Operation is now beta
  • Body
  • application/json content type Modified
    • config property Modified
      • source property Modified
        • query property Modified
GET /_ml/data_frame/analytics/_stats
  • Operation is now beta
GET /_ml/data_frame/analytics/{id}
  • Operation is now beta
  • Response
  • 200 response Modified
    • application/json content type Modified
      • data_frame_analytics property Modified
        • source property Modified
GET /_ml/data_frame/analytics/{id}/_preview
  • Operation is now beta
  • Body
  • application/json content type Modified
    • config property Modified
      • source property Modified
        • query property Modified
GET /_ml/data_frame/analytics/{id}/_stats
  • Operation is now beta
GET /_ml/datafeeds
  • Operation is now beta
  • Response
  • 200 response Modified
    • application/json content type Modified
      • datafeeds property Modified
        • query property Modified
GET /_ml/datafeeds/_preview
  • Operation is now beta
  • Body
  • application/json content type Modified
    • job_config property Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
GET /_ml/datafeeds/_stats
  • Operation is now beta
GET /_ml/datafeeds/{datafeed_id}
  • Operation is now beta
  • Response
  • 200 response Modified
    • application/json content type Modified
      • datafeeds property Modified
        • query property Modified
GET /_ml/datafeeds/{datafeed_id}/_preview
  • Operation is now beta
  • Body
  • application/json content type Modified
    • job_config property Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
GET /_ml/datafeeds/{datafeed_id}/_stats
  • Operation is now beta
GET /_ml/filters
  • Operation is now beta
GET /_ml/filters/{filter_id}
  • Operation is now beta
GET /_ml/trained_models
  • Operation is now beta
GET /_ml/trained_models/_stats
  • Operation is now beta
GET /_ml/trained_models/{model_id}
  • Operation is now beta
GET /_ml/trained_models/{model_id}/_stats
  • Operation is now beta
GET /_msearch
  • Operation is now beta
GET /_msearch/template
  • Operation is now beta
GET /_mtermvectors
  • Operation is now beta
GET /_query_rules
  • Operation is now beta
GET /_query_rules/{ruleset_id}
  • Operation is now beta
GET /_query_rules/{ruleset_id}/_rule/{rule_id}
  • Operation is now beta
GET /_rank_eval
  • Operation is now beta
GET /_refresh
  • Operation is now beta
GET /_render/template
  • Operation is now beta
GET /_render/template/{id}
  • Operation is now beta
GET /_resolve/index/{name}
  • Operation is now beta
GET /_scripts/painless/_execute
  • Operation is now beta
GET /_scripts/{id}
  • Operation is now beta
GET /_search
  • Operation is now beta
GET /_search/scroll
  • Operation is now beta
GET /_search/scroll/{scroll_id}
  • Operation is now beta
GET /_search/template
  • Operation is now beta
GET /_security/_authenticate
  • Operation is now beta
GET /_security/_query/api_key
  • Operation is now beta
GET /_security/api_key
  • Operation is now beta
GET /_security/user/_has_privileges
  • Operation is now beta
GET /_security/user/{user}/_has_privileges
  • Operation is now beta
GET /_settings
  • Operation is now beta
GET /_settings/{name}
  • Operation is now beta
GET /_sql
  • Operation is now beta
GET /_sql/async/status/{id}
  • Operation is now beta
GET /_sql/async/{id}
  • Operation is now beta
GET /_sql/translate
  • Operation is now beta
GET /_synonyms
  • Operation is now beta
GET /_synonyms/{id}
  • Operation is now beta
GET /_synonyms/{set_id}/{rule_id}
  • Operation is now beta
GET /_tasks/{task_id}
  • Operation is now beta
GET /_transform
  • Operation is now beta
  • Response
  • 200 response Modified
    • application/json content type Modified
      • transforms property Modified
        • source property Modified
GET /_transform/_preview
  • Operation is now beta
  • Body
  • application/json content type Modified
    • source property Modified
      • query property Modified
        • bool, boosting, combined_fields, constant_score, dis_max, distance_feature, exists, function_score, fuzzy, geo_bounding_box, geo_distance, geo_polygon, geo_shape, has_child, has_parent, ids, intervals, knn, match, match_all, match_bool_prefix, match_none, match_phrase, match_phrase_prefix, more_like_this, multi_match, nested, parent_id, percolate, pinned, prefix, query_string, range, rank_feature, regexp, rule, script, script_score, semantic, shape, simple_query_string, span_containing, span_field_masking, span_first, span_multi, span_near, span_not, span_or, span_term, span_within, sparse_vector, term, terms, terms_set, wildcard, wrapper, type properties Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
        • common, text_expansion, weighted_tokens properties Removed
GET /_transform/{transform_id}
  • Operation is now beta
  • Response
  • 200 response Modified
    • application/json content type Modified
      • transforms property Modified
        • source property Modified
GET /_transform/{transform_id}/_preview
  • Operation is now beta
  • Body
  • application/json content type Modified
    • source property Modified
      • query property Modified
        • bool, boosting, combined_fields, constant_score, dis_max, distance_feature, exists, function_score, fuzzy, geo_bounding_box, geo_distance, geo_polygon, geo_shape, has_child, has_parent, ids, intervals, knn, match, match_all, match_bool_prefix, match_none, match_phrase, match_phrase_prefix, more_like_this, multi_match, nested, parent_id, percolate, pinned, prefix, query_string, range, rank_feature, regexp, rule, script, script_score, semantic, shape, simple_query_string, span_containing, span_field_masking, span_first, span_multi, span_near, span_not, span_or, span_term, span_within, sparse_vector, term, terms, terms_set, wildcard, wrapper, type properties Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
        • common, text_expansion, weighted_tokens properties Removed
GET /_transform/{transform_id}/_stats
  • Operation is now beta
GET /_validate/query
  • Operation is now beta
GET /{index}
  • Operation is now beta
GET /{index}/_alias
  • Operation is now beta
GET /{index}/_alias/{name}
  • Operation is now beta
GET /{index}/_analyze
  • Operation is now beta
  • Body
  • application/json content type Modified
    • tokenizer property Modified
      • analysis:EdgeNGramTokenizer alternative Modified
        • token_chars property Modified
          • Property is no longer required
      • analysis:NGramTokenizer alternative Modified
        • token_chars property Modified
          • Property is no longer required
      • analysis:ClassicTokenizer, analysis:SimplePatternTokenizer, analysis:SimplePatternSplitTokenizer, analysis:ThaiTokenizer alternatives Added
GET /{index}/_count
  • Operation is now beta
GET /{index}/_doc/{id}
  • Operation is now beta
GET /{index}/_eql/search
  • Operation is now beta
GET /{index}/_explain/{id}
  • Operation is now beta
GET /{index}/_field_caps
  • Operation is now beta
GET /{index}/_graph/explore
  • Operation is now beta
GET /{index}/_lifecycle/explain
  • Operation is now beta
GET /{index}/_mapping
  • Operation is now beta
GET /{index}/_mget
  • Operation is now beta
GET /{index}/_msearch
  • Operation is now beta
GET /{index}/_msearch/template
  • Operation is now beta
GET /{index}/_mtermvectors
  • Operation is now beta
GET /{index}/_mvt/{field}/{zoom}/{x}/{y}
  • Operation is now beta
GET /{index}/_rank_eval
  • Operation is now beta
GET /{index}/_refresh
  • Operation is now beta
GET /{index}/_search
  • Operation is now beta
GET /{index}/_search/template
  • Operation is now beta
GET /{index}/_settings
  • Operation is now beta
GET /{index}/_settings/{name}
  • Operation is now beta
GET /{index}/_source/{id}
  • Operation is now beta
GET /{index}/_terms_enum
  • Operation is now beta
GET /{index}/_termvectors
  • Operation is now beta
GET /{index}/_termvectors/{id}
  • Operation is now beta
GET /{index}/_validate/query
  • Operation is now beta
HEAD /
  • Operation is now beta
HEAD /_alias/{name}
  • Operation is now beta
HEAD /_component_template/{name}
  • Operation is now beta
HEAD /_index_template/{name}
  • Operation is now beta
HEAD /{index}
  • Operation is now beta
HEAD /{index}/_alias/{name}
  • Operation is now beta
HEAD /{index}/_doc/{id}
  • Operation is now beta
HEAD /{index}/_source/{id}
  • Operation is now beta
POST /_aliases
  • Operation is now beta
POST /_analyze
  • Operation is now beta
  • Body
  • application/json content type Modified
    • tokenizer property Modified
      • analysis:EdgeNGramTokenizer alternative Modified
        • token_chars property Modified
          • Property is no longer required
      • analysis:NGramTokenizer alternative Modified
        • token_chars property Modified
          • Property is no longer required
      • analysis:ClassicTokenizer, analysis:SimplePatternTokenizer, analysis:SimplePatternSplitTokenizer, analysis:ThaiTokenizer alternatives Added
POST /_async_search
  • Operation is now beta
POST /_bulk
  • Operation is now beta
POST /_component_template/{name}
  • Operation is now beta
POST /_count
  • Operation is now beta
POST /_data_stream/_migrate/{name}
  • Operation is now beta
POST /_data_stream/_modify
  • Operation is now beta
POST /_field_caps
  • Operation is now beta
POST /_index_template/_simulate
  • Operation is now beta
POST /_index_template/_simulate/{name}
  • Operation is now beta
POST /_index_template/_simulate_index/{name}
  • Operation is now beta
POST /_index_template/{name}
  • Operation is now beta
POST /_inference/{inference_id}
  • Operation is now beta
POST /_inference/{task_type}/{inference_id}
  • Operation is now beta
POST /_ingest/pipeline/_simulate
  • Operation is now beta
POST /_ingest/pipeline/{id}/_simulate
  • Operation is now beta
POST /_mget
  • Operation is now beta
POST /_ml/anomaly_detectors/_estimate_model_memory
  • Operation is now beta
  • Body
  • application/json content type Modified
    • analysis_config property Modified
      • categorization_analyzer property Modified
        • _types:CategorizationAnalyzerDefinition alternative Modified
POST /_ml/anomaly_detectors/{job_id}/_close
  • Operation is now beta
POST /_ml/anomaly_detectors/{job_id}/_flush
  • Operation is now beta
POST /_ml/anomaly_detectors/{job_id}/_open
  • Operation is now beta
POST /_ml/anomaly_detectors/{job_id}/_reset
  • Operation is now beta
POST /_ml/anomaly_detectors/{job_id}/_update
  • Operation is now beta
  • Response
  • 200 response Modified
    • application/json content type Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
      • datafeed_config property Modified
        • query property Modified
POST /_ml/anomaly_detectors/{job_id}/results/overall_buckets
  • Operation is now beta
POST /_ml/calendars
  • Operation is now beta
POST /_ml/calendars/{calendar_id}
  • Operation is now beta
POST /_ml/calendars/{calendar_id}/events
  • Operation is now beta
POST /_ml/data_frame/_evaluate
  • Operation is now beta
POST /_ml/data_frame/analytics/_preview
  • Operation is now beta
  • Body
  • application/json content type Modified
    • config property Modified
      • source property Modified
        • query property Modified
POST /_ml/data_frame/analytics/{id}/_preview
  • Operation is now beta
  • Body
  • application/json content type Modified
    • config property Modified
      • source property Modified
        • query property Modified
POST /_ml/data_frame/analytics/{id}/_start
  • Operation is now beta
POST /_ml/data_frame/analytics/{id}/_stop
  • Operation is now beta
POST /_ml/data_frame/analytics/{id}/_update
  • Operation is now beta
  • Response
  • 200 response Modified
    • application/json content type Modified
      • source property Modified
        • query property Modified
POST /_ml/datafeeds/_preview
  • Operation is now beta
  • Body
  • application/json content type Modified
    • job_config property Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
POST /_ml/datafeeds/{datafeed_id}/_preview
  • Operation is now beta
  • Body
  • application/json content type Modified
    • job_config property Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
POST /_ml/datafeeds/{datafeed_id}/_start
  • Operation is now beta
POST /_ml/datafeeds/{datafeed_id}/_stop
  • Operation is now beta
POST /_ml/datafeeds/{datafeed_id}/_update
  • Operation is now beta
POST /_ml/filters/{filter_id}/_update
  • Operation is now beta
POST /_ml/trained_models/{model_id}/_infer
  • Operation is now beta
POST /_ml/trained_models/{model_id}/deployment/_infer
  • Operation is now beta
POST /_ml/trained_models/{model_id}/deployment/_start
  • Operation is now beta
POST /_ml/trained_models/{model_id}/deployment/_stop
  • Operation is now beta
POST /_msearch
  • Operation is now beta
POST /_msearch/template
  • Operation is now beta
POST /_mtermvectors
  • Operation is now beta
POST /_query
  • Operation is now beta
POST /_rank_eval
  • Operation is now beta
POST /_refresh
  • Operation is now beta
POST /_reindex
  • Operation is now beta
POST /_render/template
  • Operation is now beta
POST /_render/template/{id}
  • Operation is now beta
POST /_scripts/painless/_execute
  • Operation is now beta
POST /_scripts/{id}
  • Operation is now beta
POST /_scripts/{id}/{context}
  • Operation is now beta
POST /_search
  • Operation is now beta
POST /_search/scroll
  • Operation is now beta
POST /_search/scroll/{scroll_id}
  • Operation is now beta
POST /_search/template
  • Operation is now beta
POST /_security/_query/api_key
  • Operation is now beta
POST /_security/api_key
  • Operation is now beta
POST /_security/user/_has_privileges
  • Operation is now beta
POST /_security/user/{user}/_has_privileges
  • Operation is now beta
POST /_sql
  • Operation is now beta
POST /_sql/close
  • Operation is now beta
POST /_sql/translate
  • Operation is now beta
POST /_template/{name}
  • Operation is now beta
POST /_transform/_preview
  • Operation is now beta
  • Body
  • application/json content type Modified
    • source property Modified
      • query property Modified
        • bool, boosting, combined_fields, constant_score, dis_max, distance_feature, exists, function_score, fuzzy, geo_bounding_box, geo_distance, geo_polygon, geo_shape, has_child, has_parent, ids, intervals, knn, match, match_all, match_bool_prefix, match_none, match_phrase, match_phrase_prefix, more_like_this, multi_match, nested, parent_id, percolate, pinned, prefix, query_string, range, rank_feature, regexp, rule, script, script_score, semantic, shape, simple_query_string, span_containing, span_field_masking, span_first, span_multi, span_near, span_not, span_or, span_term, span_within, sparse_vector, term, terms, terms_set, wildcard, wrapper, type properties Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
        • common, text_expansion, weighted_tokens properties Removed
POST /_transform/{transform_id}/_preview
  • Operation is now beta
  • Body
  • application/json content type Modified
    • source property Modified
      • query property Modified
        • bool, boosting, combined_fields, constant_score, dis_max, distance_feature, exists, function_score, fuzzy, geo_bounding_box, geo_distance, geo_polygon, geo_shape, has_child, has_parent, ids, intervals, knn, match, match_all, match_bool_prefix, match_none, match_phrase, match_phrase_prefix, more_like_this, multi_match, nested, parent_id, percolate, pinned, prefix, query_string, range, rank_feature, regexp, rule, script, script_score, semantic, shape, simple_query_string, span_containing, span_field_masking, span_first, span_multi, span_near, span_not, span_or, span_term, span_within, sparse_vector, term, terms, terms_set, wildcard, wrapper, type properties Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
        • common, text_expansion, weighted_tokens properties Removed
POST /_transform/{transform_id}/_reset
  • Operation is now beta
POST /_transform/{transform_id}/_schedule_now
  • Operation is now beta
POST /_transform/{transform_id}/_start
  • Operation is now beta
POST /_transform/{transform_id}/_stop
  • Operation is now beta
POST /_transform/{transform_id}/_update
  • Operation is now beta
  • Body
  • application/json content type Modified
    • source property Modified
      • query property Modified
        • bool, boosting, combined_fields, constant_score, dis_max, distance_feature, exists, function_score, fuzzy, geo_bounding_box, geo_distance, geo_polygon, geo_shape, has_child, has_parent, ids, intervals, knn, match, match_all, match_bool_prefix, match_none, match_phrase, match_phrase_prefix, more_like_this, multi_match, nested, parent_id, percolate, pinned, prefix, query_string, range, rank_feature, regexp, rule, script, script_score, semantic, shape, simple_query_string, span_containing, span_field_masking, span_first, span_multi, span_near, span_not, span_or, span_term, span_within, sparse_vector, term, terms, terms_set, wildcard, wrapper, type properties Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
        • common, text_expansion, weighted_tokens properties Removed
POST /_validate/query
  • Operation is now beta
POST /{alias}/_rollover
  • Operation is now beta
POST /{alias}/_rollover/{new_index}
  • Operation is now beta
POST /{index}/_alias/{name}
  • Operation is now beta
POST /{index}/_aliases/{name}
  • Operation is now beta
POST /{index}/_analyze
  • Operation is now beta
  • Body
  • application/json content type Modified
    • tokenizer property Modified
      • analysis:EdgeNGramTokenizer alternative Modified
        • token_chars property Modified
          • Property is no longer required
      • analysis:NGramTokenizer alternative Modified
        • token_chars property Modified
          • Property is no longer required
      • analysis:ClassicTokenizer, analysis:SimplePatternTokenizer, analysis:SimplePatternSplitTokenizer, analysis:ThaiTokenizer alternatives Added
POST /{index}/_async_search
  • Operation is now beta
POST /{index}/_bulk
  • Operation is now beta
POST /{index}/_count
  • Operation is now beta
POST /{index}/_create/{id}
  • Operation is now beta
POST /{index}/_delete_by_query
  • Operation is now beta
POST /{index}/_doc
  • Operation is now beta
POST /{index}/_doc/{id}
  • Operation is now beta
POST /{index}/_eql/search
  • Operation is now beta
POST /{index}/_explain/{id}
  • Operation is now beta
POST /{index}/_field_caps
  • Operation is now beta
POST /{index}/_graph/explore
  • Operation is now beta
POST /{index}/_mapping
  • Operation is now beta
POST /{index}/_mget
  • Operation is now beta
POST /{index}/_msearch
  • Operation is now beta
POST /{index}/_msearch/template
  • Operation is now beta
POST /{index}/_mtermvectors
  • Operation is now beta
POST /{index}/_mvt/{field}/{zoom}/{x}/{y}
  • Operation is now beta
POST /{index}/_pit
  • Operation is now beta
POST /{index}/_rank_eval
  • Operation is now beta
POST /{index}/_refresh
  • Operation is now beta
POST /{index}/_search
  • Operation is now beta
POST /{index}/_search/template
  • Operation is now beta
POST /{index}/_terms_enum
  • Operation is now beta
POST /{index}/_termvectors
  • Operation is now beta
POST /{index}/_termvectors/{id}
  • Operation is now beta
POST /{index}/_update/{id}
  • Operation is now beta
POST /{index}/_update_by_query
  • Operation is now beta
POST /{index}/_validate/query
  • Operation is now beta
PUT /_application/analytics/{name}
  • Operation is now beta
PUT /_bulk
  • Operation is now beta
PUT /_component_template/{name}
  • Operation is now beta
PUT /_connector/{connector_id}/_check_in
  • Operation is now beta
PUT /_connector/{connector_id}/_error
  • Operation is now beta
PUT /_connector/{connector_id}/_filtering/_activate
  • Operation is now beta
PUT /_connector/{connector_id}/_filtering/_validation
  • Operation is now beta
PUT /_connector/{connector_id}/_status
  • Operation is now beta
PUT /_data_stream/{name}
  • Operation is now beta
PUT /_data_stream/{name}/_lifecycle
  • Operation is now beta
PUT /_enrich/policy/{name}
  • Operation is now beta
PUT /_enrich/policy/{name}/_execute
  • Operation is now beta
PUT /_index_template/{name}
  • Operation is now beta
PUT /_inference/{inference_id}
  • Operation is now beta
PUT /_inference/{task_type}/{inference_id}
  • Operation is now beta
PUT /_ingest/pipeline/{id}
  • Operation is now beta
PUT /_logstash/pipeline/{id}
  • Operation is now beta
PUT /_ml/anomaly_detectors/{job_id}
  • Operation is now beta
  • Body
  • application/json content type Modified
    • analysis_config property Modified
      • categorization_analyzer property Modified
        • _types:CategorizationAnalyzerDefinition alternative Modified
  • Response
  • 200 response Modified
    • application/json content type Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
      • datafeed_config property Modified
        • query property Modified
PUT /_ml/calendars/{calendar_id}
  • Operation is now beta
PUT /_ml/calendars/{calendar_id}/jobs/{job_id}
  • Operation is now beta
PUT /_ml/data_frame/analytics/{id}
  • Operation is now beta
  • Body
  • application/json content type Modified
    • source property Modified
      • query property Modified
        • bool, boosting, combined_fields, constant_score, dis_max, distance_feature, exists, function_score, fuzzy, geo_bounding_box, geo_distance, geo_polygon, geo_shape, has_child, has_parent, ids, intervals, knn, match, match_all, match_bool_prefix, match_none, match_phrase, match_phrase_prefix, more_like_this, multi_match, nested, parent_id, percolate, pinned, prefix, query_string, range, rank_feature, regexp, rule, script, script_score, semantic, shape, simple_query_string, span_containing, span_field_masking, span_first, span_multi, span_near, span_not, span_or, span_term, span_within, sparse_vector, term, terms, terms_set, wildcard, wrapper, type properties Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
        • common, text_expansion, weighted_tokens properties Removed
  • Response
  • 200 response Modified
    • application/json content type Modified
      • source property Modified
        • query property Modified
PUT /_ml/datafeeds/{datafeed_id}
  • Operation is now beta
PUT /_ml/filters/{filter_id}
  • Operation is now beta
PUT /_ml/trained_models/{model_id}
  • Operation is now beta
PUT /_ml/trained_models/{model_id}/definition/{part}
  • Operation is now beta
PUT /_ml/trained_models/{model_id}/model_aliases/{model_alias}
  • Operation is now beta
PUT /_ml/trained_models/{model_id}/vocabulary
  • Operation is now beta
PUT /_query_rules/{ruleset_id}
  • Operation is now beta
PUT /_query_rules/{ruleset_id}/_rule/{rule_id}
  • Operation is now beta
PUT /_scripts/{id}
  • Operation is now beta
PUT /_scripts/{id}/{context}
  • Operation is now beta
PUT /_security/api_key
  • Operation is now beta
PUT /_security/api_key/{id}
  • Operation is now beta
PUT /_settings
  • Operation is now beta
PUT /_synonyms/{id}
  • Operation is now beta
PUT /_synonyms/{set_id}/{rule_id}
  • Operation is now beta
PUT /_template/{name}
  • Operation is now beta
PUT /_transform/{transform_id}
  • Operation is now beta
  • Body
  • application/json content type Modified
    • source property Modified
      • query property Modified
        • bool, boosting, combined_fields, constant_score, dis_max, distance_feature, exists, function_score, fuzzy, geo_bounding_box, geo_distance, geo_polygon, geo_shape, has_child, has_parent, ids, intervals, knn, match, match_all, match_bool_prefix, match_none, match_phrase, match_phrase_prefix, more_like_this, multi_match, nested, parent_id, percolate, pinned, prefix, query_string, range, rank_feature, regexp, rule, script, script_score, semantic, shape, simple_query_string, span_containing, span_field_masking, span_first, span_multi, span_near, span_not, span_or, span_term, span_within, sparse_vector, term, terms, terms_set, wildcard, wrapper, type properties Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
        • common, text_expansion, weighted_tokens properties Removed
PUT /{index}
  • Operation is now beta
PUT /{index}/_alias/{name}
  • Operation is now beta
PUT /{index}/_aliases/{name}
  • Operation is now beta
PUT /{index}/_block/{block}
  • Operation is now beta
PUT /{index}/_bulk
  • Operation is now beta
PUT /{index}/_create/{id}
  • Operation is now beta
PUT /{index}/_doc/{id}
  • Operation is now beta
PUT /{index}/_mapping
  • Operation is now beta
PUT /{index}/_settings
  • Operation is now beta
Elastic Cloud Serverless API
12 structure changes including:
12 Modifications
Modified 12
DELETE /api/v1/serverless/projects/elasticsearch/{id}
  • Response
  • 409, 412 responses Added
DELETE /api/v1/serverless/projects/observability/{id}
  • Response
  • 409, 412 responses Added
DELETE /api/v1/serverless/projects/security/{id}
  • Response
  • 409, 412 responses Added
PATCH /api/v1/serverless/projects/elasticsearch/{id}
  • Response
  • 409, 412 responses Added
PATCH /api/v1/serverless/projects/observability/{id}
  • Response
  • 409, 412 responses Added
PATCH /api/v1/serverless/projects/security/{id}
  • Response
  • 409, 412 responses Added
POST /api/v1/serverless/projects/elasticsearch/{id}/_reset-credentials
  • Response
  • 409 response Added
POST /api/v1/serverless/projects/elasticsearch/{id}/_resume
  • Response
  • 409, 412 responses Added
POST /api/v1/serverless/projects/observability/{id}/_reset-credentials
  • Response
  • 409 response Added
POST /api/v1/serverless/projects/observability/{id}/_resume
  • Response
  • 409, 412 responses Added
POST /api/v1/serverless/projects/security/{id}/_reset-credentials
  • Response
  • 409 response Added
POST /api/v1/serverless/projects/security/{id}/_resume
  • Response
  • 409, 412 responses Added
Elastic Cloud Serverless API
4 structure changes including:
4 Modifications
Modified 4
GET /api/v1/serverless/projects/security
  • Response
  • 200 response Modified
    • application/json content type Modified
      • items property Modified
        • search_lake property Added
GET /api/v1/serverless/projects/security/{id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • search_lake property Added
PATCH /api/v1/serverless/projects/security/{id}
  • Body
  • application/json content type Modified
    • search_lake property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • search_lake property Added
POST /api/v1/serverless/projects/security
  • Body
  • application/json content type Modified
    • search_lake property Added
  • Response
  • 201 response Modified
    • application/json content type Modified
      • search_lake property Added
Kibana Serverless API

This release fixes the Fleet paths, which were missing "/api/fleet"

107 structure changes including:
106 Modifications
1 Removal
Modified 106
DELETE /api/fleet/agent_download_sources/{sourceId}
  • Path went from /agent_download_sources/{sourceId} to /api/fleet/agent_download_sources/{sourceId} (same operationId)
DELETE /api/fleet/agents/files/{fileId}
  • Path went from /agents/files/{fileId} to /api/fleet/agents/files/{fileId} (same operationId)
DELETE /api/fleet/agents/{agentId}
  • Path went from /agents/{agentId} to /api/fleet/agents/{agentId} (same operationId)
DELETE /api/fleet/enrollment-api-keys/{keyId}
  • Path went from /enrollment-api-keys/{keyId} to /api/fleet/enrollment-api-keys/{keyId} (same operationId)
DELETE /api/fleet/enrollment_api_keys/{keyId}
  • Path went from /enrollment_api_keys/{keyId} to /api/fleet/enrollment_api_keys/{keyId} (same operationId)
DELETE /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Path went from /epm/packages/{pkgName}/{pkgVersion} to /api/fleet/epm/packages/{pkgName}/{pkgVersion} (same operationId)
DELETE /api/fleet/epm/packages/{pkgkey}
  • Path went from /epm/packages/{pkgkey} to /api/fleet/epm/packages/{pkgkey} (same operationId)
DELETE /api/fleet/fleet_server_hosts/{itemId}
  • Path went from /fleet_server_hosts/{itemId} to /api/fleet/fleet_server_hosts/{itemId} (same operationId)
DELETE /api/fleet/outputs/{outputId}
  • Path went from /outputs/{outputId} to /api/fleet/outputs/{outputId} (same operationId)
DELETE /api/fleet/package_policies/{packagePolicyId}
  • Path went from /package_policies/{packagePolicyId} to /api/fleet/package_policies/{packagePolicyId} (same operationId)
DELETE /api/fleet/proxies/{itemId}
  • Path went from /proxies/{itemId} to /api/fleet/proxies/{itemId} (same operationId)
GET /api/fleet/agent-status
  • Path went from /agent-status to /api/fleet/agent-status (same operationId)
GET /api/fleet/agent_download_sources
  • Path went from /agent_download_sources to /api/fleet/agent_download_sources (same operationId)
GET /api/fleet/agent_download_sources/{sourceId}
  • Path went from /agent_download_sources/{sourceId} to /api/fleet/agent_download_sources/{sourceId} (same operationId)
GET /api/fleet/agent_policies
  • Path went from /agent_policies to /api/fleet/agent_policies (same operationId)
GET /api/fleet/agent_policies/{agentPolicyId}
  • Path went from /agent_policies/{agentPolicyId} to /api/fleet/agent_policies/{agentPolicyId} (same operationId)
GET /api/fleet/agent_policies/{agentPolicyId}/download
  • Path went from /agent_policies/{agentPolicyId}/download to /api/fleet/agent_policies/{agentPolicyId}/download (same operationId)
GET /api/fleet/agent_policies/{agentPolicyId}/full
  • Path went from /agent_policies/{agentPolicyId}/full to /api/fleet/agent_policies/{agentPolicyId}/full (same operationId)
GET /api/fleet/agent_status
  • Path went from /agent_status to /api/fleet/agent_status (same operationId)
GET /api/fleet/agent_status/data
  • Path went from /agent_status/data to /api/fleet/agent_status/data (same operationId)
GET /api/fleet/agents
  • Path went from /agents to /api/fleet/agents (same operationId)
GET /api/fleet/agents/action_status
  • Path went from /agents/action_status to /api/fleet/agents/action_status (same operationId)
GET /api/fleet/agents/files/{fileId}/{fileName}
  • Path went from /agents/files/{fileId}/{fileName} to /api/fleet/agents/files/{fileId}/{fileName} (same operationId)
GET /api/fleet/agents/setup
  • Path went from /agents/setup to /api/fleet/agents/setup (same operationId)
GET /api/fleet/agents/tags
  • Path went from /agents/tags to /api/fleet/agents/tags (same operationId)
GET /api/fleet/agents/{agentId}
  • Path went from /agents/{agentId} to /api/fleet/agents/{agentId} (same operationId)
GET /api/fleet/agents/{agentId}/uploads
  • Path went from /agents/{agentId}/uploads to /api/fleet/agents/{agentId}/uploads (same operationId)
GET /api/fleet/data_streams
  • Path went from /data_streams to /api/fleet/data_streams (same operationId)
GET /api/fleet/enrollment-api-keys
  • Path went from /enrollment-api-keys to /api/fleet/enrollment-api-keys (same operationId)
GET /api/fleet/enrollment-api-keys/{keyId}
  • Path went from /enrollment-api-keys/{keyId} to /api/fleet/enrollment-api-keys/{keyId} (same operationId)
GET /api/fleet/enrollment_api_keys
  • Path went from /enrollment_api_keys to /api/fleet/enrollment_api_keys (same operationId)
GET /api/fleet/enrollment_api_keys/{keyId}
  • Path went from /enrollment_api_keys/{keyId} to /api/fleet/enrollment_api_keys/{keyId} (same operationId)
GET /api/fleet/epm/categories
  • Path went from /epm/categories to /api/fleet/epm/categories (same operationId)
GET /api/fleet/epm/packages
  • Path went from /epm/packages to /api/fleet/epm/packages (same operationId)
GET /api/fleet/epm/packages/limited
  • Path went from /epm/packages/limited to /api/fleet/epm/packages/limited (same operationId)
GET /api/fleet/epm/packages/{pkgName}/stats
  • Path went from /epm/packages/{pkgName}/stats to /api/fleet/epm/packages/{pkgName}/stats (same operationId)
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Path went from /epm/packages/{pkgName}/{pkgVersion} to /api/fleet/epm/packages/{pkgName}/{pkgVersion} (same operationId)
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}/{filePath}
  • Path went from /epm/packages/{pkgName}/{pkgVersion}/{filePath} to /api/fleet/epm/packages/{pkgName}/{pkgVersion}/{filePath} (same operationId)
GET /api/fleet/epm/packages/{pkgkey}
  • Path went from /epm/packages/{pkgkey} to /api/fleet/epm/packages/{pkgkey} (same operationId)
GET /api/fleet/epm/templates/{pkgName}/{pkgVersion}/inputs
  • Path went from /epm/templates/{pkgName}/{pkgVersion}/inputs to /api/fleet/epm/templates/{pkgName}/{pkgVersion}/inputs (same operationId)
GET /api/fleet/epm/verification_key_id
  • Path went from /epm/verification_key_id to /api/fleet/epm/verification_key_id (same operationId)
GET /api/fleet/fleet_server_hosts
  • Path went from /fleet_server_hosts to /api/fleet/fleet_server_hosts (same operationId)
GET /api/fleet/fleet_server_hosts/{itemId}
  • Path went from /fleet_server_hosts/{itemId} to /api/fleet/fleet_server_hosts/{itemId} (same operationId)
GET /api/fleet/kubernetes
  • Path went from /kubernetes to /api/fleet/kubernetes (same operationId)
GET /api/fleet/outputs
  • Path went from /outputs to /api/fleet/outputs (same operationId)
GET /api/fleet/outputs/{outputId}
  • Path went from /outputs/{outputId} to /api/fleet/outputs/{outputId} (same operationId)
GET /api/fleet/outputs/{outputId}/health
  • Path went from /outputs/{outputId}/health to /api/fleet/outputs/{outputId}/health (same operationId)
GET /api/fleet/package_policies
  • Path went from /package_policies to /api/fleet/package_policies (same operationId)
GET /api/fleet/package_policies/{packagePolicyId}
  • Path went from /package_policies/{packagePolicyId} to /api/fleet/package_policies/{packagePolicyId} (same operationId)
GET /api/fleet/proxies
  • Path went from /proxies to /api/fleet/proxies (same operationId)
GET /api/fleet/proxies/{itemId}
  • Path went from /proxies/{itemId} to /api/fleet/proxies/{itemId} (same operationId)
GET /api/fleet/settings
  • Path went from /settings to /api/fleet/settings (same operationId)
GET /api/fleet/uninstall_tokens
  • Path went from /uninstall_tokens to /api/fleet/uninstall_tokens (same operationId)
GET /api/fleet/uninstall_tokens/{uninstallTokenId}
  • Path went from /uninstall_tokens/{uninstallTokenId} to /api/fleet/uninstall_tokens/{uninstallTokenId} (same operationId)
POST /api/actions/connector/{id}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • config property Modified
      • crowdstrike_config, thehive_config alternatives Added
    • secrets property Modified
      • crowdstrike_secrets, thehive_secrets alternatives Added
POST /api/actions/connector/{id}/_execute
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • params property Modified
      • run_createalert alternative Modified
        • subActionParams property Modified
      • run_pushtoservice alternative Modified
        • subActionParams property Modified
POST /api/fleet/agent_download_sources
  • Path went from /agent_download_sources to /api/fleet/agent_download_sources (same operationId)
POST /api/fleet/agent_policies
  • Path went from /agent_policies to /api/fleet/agent_policies (same operationId)
POST /api/fleet/agent_policies/_bulk_get
  • Path went from /agent_policies/_bulk_get to /api/fleet/agent_policies/_bulk_get (same operationId)
POST /api/fleet/agent_policies/delete
  • Path went from /agent_policies/delete to /api/fleet/agent_policies/delete (same operationId)
POST /api/fleet/agent_policies/{agentPolicyId}/copy
  • Path went from /agent_policies/{agentPolicyId}/copy to /api/fleet/agent_policies/{agentPolicyId}/copy (same operationId)
POST /api/fleet/agents
  • Path went from /agents to /api/fleet/agents (same operationId)
POST /api/fleet/agents/actions/{actionId}/cancel
  • Path went from /agents/actions/{actionId}/cancel to /api/fleet/agents/actions/{actionId}/cancel (same operationId)
POST /api/fleet/agents/bulk_reassign
  • Path went from /agents/bulk_reassign to /api/fleet/agents/bulk_reassign (same operationId)
POST /api/fleet/agents/bulk_request_diagnostics
  • Path went from /agents/bulk_request_diagnostics to /api/fleet/agents/bulk_request_diagnostics (same operationId)
POST /api/fleet/agents/bulk_unenroll
  • Path went from /agents/bulk_unenroll to /api/fleet/agents/bulk_unenroll (same operationId)
POST /api/fleet/agents/bulk_update_agent_tags
  • Path went from /agents/bulk_update_agent_tags to /api/fleet/agents/bulk_update_agent_tags (same operationId)
POST /api/fleet/agents/bulk_upgrade
  • Path went from /agents/bulk_upgrade to /api/fleet/agents/bulk_upgrade (same operationId)
POST /api/fleet/agents/setup
  • Path went from /agents/setup to /api/fleet/agents/setup (same operationId)
POST /api/fleet/agents/{agentId}/actions
  • Path went from /agents/{agentId}/actions to /api/fleet/agents/{agentId}/actions (same operationId)
POST /api/fleet/agents/{agentId}/reassign
  • Path went from /agents/{agentId}/reassign to /api/fleet/agents/{agentId}/reassign (same operationId)
POST /api/fleet/agents/{agentId}/request_diagnostics
  • Path went from /agents/{agentId}/request_diagnostics to /api/fleet/agents/{agentId}/request_diagnostics (same operationId)
POST /api/fleet/agents/{agentId}/unenroll
  • Path went from /agents/{agentId}/unenroll to /api/fleet/agents/{agentId}/unenroll (same operationId)
POST /api/fleet/agents/{agentId}/upgrade
  • Path went from /agents/{agentId}/upgrade to /api/fleet/agents/{agentId}/upgrade (same operationId)
POST /api/fleet/enrollment-api-keys
  • Path went from /enrollment-api-keys to /api/fleet/enrollment-api-keys (same operationId)
POST /api/fleet/enrollment_api_keys
  • Path went from /enrollment_api_keys to /api/fleet/enrollment_api_keys (same operationId)
POST /api/fleet/epm/bulk_assets
  • Path went from /epm/bulk_assets to /api/fleet/epm/bulk_assets (same operationId)
POST /api/fleet/epm/packages
  • Path went from /epm/packages to /api/fleet/epm/packages (same operationId)
POST /api/fleet/epm/packages/_bulk
  • Path went from /epm/packages/_bulk to /api/fleet/epm/packages/_bulk (same operationId)
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Path went from /epm/packages/{pkgName}/{pkgVersion} to /api/fleet/epm/packages/{pkgName}/{pkgVersion} (same operationId)
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}/transforms/authorize
  • Path went from /epm/packages/{pkgName}/{pkgVersion}/transforms/authorize to /api/fleet/epm/packages/{pkgName}/{pkgVersion}/transforms/authorize (same operationId)
POST /api/fleet/epm/packages/{pkgkey}
  • Path went from /epm/packages/{pkgkey} to /api/fleet/epm/packages/{pkgkey} (same operationId)
POST /api/fleet/fleet_server_hosts
  • Path went from /fleet_server_hosts to /api/fleet/fleet_server_hosts (same operationId)
POST /api/fleet/health_check
  • Path went from /health_check to /api/fleet/health_check (same operationId)
POST /api/fleet/logstash_api_keys
  • Path went from /logstash_api_keys to /api/fleet/logstash_api_keys (same operationId)
POST /api/fleet/outputs
  • Path went from /outputs to /api/fleet/outputs (same operationId)
POST /api/fleet/package_policies
  • Path went from /package_policies to /api/fleet/package_policies (same operationId)
POST /api/fleet/package_policies/_bulk_get
  • Path went from /package_policies/_bulk_get to /api/fleet/package_policies/_bulk_get (same operationId)
POST /api/fleet/package_policies/delete
  • Path went from /package_policies/delete to /api/fleet/package_policies/delete (same operationId)
POST /api/fleet/package_policies/upgrade
  • Path went from /package_policies/upgrade to /api/fleet/package_policies/upgrade (same operationId)
POST /api/fleet/package_policies/upgrade/dryrun
  • Path went from /package_policies/upgrade/dryrun to /api/fleet/package_policies/upgrade/dryrun (same operationId)
POST /api/fleet/proxies
  • Path went from /proxies to /api/fleet/proxies (same operationId)
POST /api/fleet/service-tokens
  • Path went from /service-tokens to /api/fleet/service-tokens (same operationId)
POST /api/fleet/service_tokens
  • Path went from /service_tokens to /api/fleet/service_tokens (same operationId)
POST /api/fleet/setup
  • Path went from /setup to /api/fleet/setup (same operationId)
PUT /api/actions/connector/{id}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • config property Modified
      • crowdstrike_config, thehive_config alternatives Added
    • secrets property Modified
      • crowdstrike_secrets, thehive_secrets alternatives Added
PUT /api/fleet/agent_download_sources/{sourceId}
  • Path went from /agent_download_sources/{sourceId} to /api/fleet/agent_download_sources/{sourceId} (same operationId)
PUT /api/fleet/agent_policies/{agentPolicyId}
  • Path went from /agent_policies/{agentPolicyId} to /api/fleet/agent_policies/{agentPolicyId} (same operationId)
PUT /api/fleet/agents/{agentId}
  • Path went from /agents/{agentId} to /api/fleet/agents/{agentId} (same operationId)
PUT /api/fleet/agents/{agentId}/reassign
  • Path went from /agents/{agentId}/reassign to /api/fleet/agents/{agentId}/reassign (same operationId)
PUT /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Path went from /epm/packages/{pkgName}/{pkgVersion} to /api/fleet/epm/packages/{pkgName}/{pkgVersion} (same operationId)
PUT /api/fleet/fleet_server_hosts/{itemId}
  • Path went from /fleet_server_hosts/{itemId} to /api/fleet/fleet_server_hosts/{itemId} (same operationId)
PUT /api/fleet/outputs/{outputId}
  • Path went from /outputs/{outputId} to /api/fleet/outputs/{outputId} (same operationId)
PUT /api/fleet/package_policies/{packagePolicyId}
  • Path went from /package_policies/{packagePolicyId} to /api/fleet/package_policies/{packagePolicyId} (same operationId)
PUT /api/fleet/proxies/{itemId}
  • Path went from /proxies/{itemId} to /api/fleet/proxies/{itemId} (same operationId)
PUT /api/fleet/settings
  • Path went from /settings to /api/fleet/settings (same operationId)
Removed 1
GET /settings/enrollment
Kibana API

This release fixes the Fleet paths, which were missing "/api/fleet"

107 structure changes including:
94 Breaking changes
106 Modifications
1 Removal
Modified 106 Breaking
DELETE /api/fleet/agent_download_sources/{sourceId}
  • Path went from /agent_download_sources/{sourceId} to /api/fleet/agent_download_sources/{sourceId} (same operationId)
    Breaking
DELETE /api/fleet/agents/files/{fileId}
  • Path went from /agents/files/{fileId} to /api/fleet/agents/files/{fileId} (same operationId)
    Breaking
DELETE /api/fleet/agents/{agentId}
  • Path went from /agents/{agentId} to /api/fleet/agents/{agentId} (same operationId)
    Breaking
DELETE /api/fleet/enrollment-api-keys/{keyId}
  • Path went from /enrollment-api-keys/{keyId} to /api/fleet/enrollment-api-keys/{keyId} (same operationId)
DELETE /api/fleet/enrollment_api_keys/{keyId}
  • Path went from /enrollment_api_keys/{keyId} to /api/fleet/enrollment_api_keys/{keyId} (same operationId)
    Breaking
DELETE /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Path went from /epm/packages/{pkgName}/{pkgVersion} to /api/fleet/epm/packages/{pkgName}/{pkgVersion} (same operationId)
    Breaking
DELETE /api/fleet/epm/packages/{pkgkey}
  • Path went from /epm/packages/{pkgkey} to /api/fleet/epm/packages/{pkgkey} (same operationId)
DELETE /api/fleet/fleet_server_hosts/{itemId}
  • Path went from /fleet_server_hosts/{itemId} to /api/fleet/fleet_server_hosts/{itemId} (same operationId)
    Breaking
DELETE /api/fleet/outputs/{outputId}
  • Path went from /outputs/{outputId} to /api/fleet/outputs/{outputId} (same operationId)
    Breaking
DELETE /api/fleet/package_policies/{packagePolicyId}
  • Path went from /package_policies/{packagePolicyId} to /api/fleet/package_policies/{packagePolicyId} (same operationId)
    Breaking
DELETE /api/fleet/proxies/{itemId}
  • Path went from /proxies/{itemId} to /api/fleet/proxies/{itemId} (same operationId)
    Breaking
GET /api/fleet/agent-status
  • Path went from /agent-status to /api/fleet/agent-status (same operationId)
GET /api/fleet/agent_download_sources
  • Path went from /agent_download_sources to /api/fleet/agent_download_sources (same operationId)
    Breaking
GET /api/fleet/agent_download_sources/{sourceId}
  • Path went from /agent_download_sources/{sourceId} to /api/fleet/agent_download_sources/{sourceId} (same operationId)
    Breaking
GET /api/fleet/agent_policies
  • Path went from /agent_policies to /api/fleet/agent_policies (same operationId)
    Breaking
GET /api/fleet/agent_policies/{agentPolicyId}
  • Path went from /agent_policies/{agentPolicyId} to /api/fleet/agent_policies/{agentPolicyId} (same operationId)
    Breaking
GET /api/fleet/agent_policies/{agentPolicyId}/download
  • Path went from /agent_policies/{agentPolicyId}/download to /api/fleet/agent_policies/{agentPolicyId}/download (same operationId)
    Breaking
GET /api/fleet/agent_policies/{agentPolicyId}/full
  • Path went from /agent_policies/{agentPolicyId}/full to /api/fleet/agent_policies/{agentPolicyId}/full (same operationId)
    Breaking
GET /api/fleet/agent_status
  • Path went from /agent_status to /api/fleet/agent_status (same operationId)
    Breaking
GET /api/fleet/agent_status/data
  • Path went from /agent_status/data to /api/fleet/agent_status/data (same operationId)
    Breaking
GET /api/fleet/agents
  • Path went from /agents to /api/fleet/agents (same operationId)
    Breaking
GET /api/fleet/agents/action_status
  • Path went from /agents/action_status to /api/fleet/agents/action_status (same operationId)
    Breaking
GET /api/fleet/agents/files/{fileId}/{fileName}
  • Path went from /agents/files/{fileId}/{fileName} to /api/fleet/agents/files/{fileId}/{fileName} (same operationId)
    Breaking
GET /api/fleet/agents/setup
  • Path went from /agents/setup to /api/fleet/agents/setup (same operationId)
    Breaking
GET /api/fleet/agents/tags
  • Path went from /agents/tags to /api/fleet/agents/tags (same operationId)
    Breaking
GET /api/fleet/agents/{agentId}
  • Path went from /agents/{agentId} to /api/fleet/agents/{agentId} (same operationId)
    Breaking
GET /api/fleet/agents/{agentId}/uploads
  • Path went from /agents/{agentId}/uploads to /api/fleet/agents/{agentId}/uploads (same operationId)
    Breaking
GET /api/fleet/data_streams
  • Path went from /data_streams to /api/fleet/data_streams (same operationId)
    Breaking
GET /api/fleet/enrollment-api-keys
  • Path went from /enrollment-api-keys to /api/fleet/enrollment-api-keys (same operationId)
GET /api/fleet/enrollment-api-keys/{keyId}
  • Path went from /enrollment-api-keys/{keyId} to /api/fleet/enrollment-api-keys/{keyId} (same operationId)
GET /api/fleet/enrollment_api_keys
  • Path went from /enrollment_api_keys to /api/fleet/enrollment_api_keys (same operationId)
    Breaking
GET /api/fleet/enrollment_api_keys/{keyId}
  • Path went from /enrollment_api_keys/{keyId} to /api/fleet/enrollment_api_keys/{keyId} (same operationId)
    Breaking
GET /api/fleet/epm/categories
  • Path went from /epm/categories to /api/fleet/epm/categories (same operationId)
    Breaking
GET /api/fleet/epm/packages
  • Path went from /epm/packages to /api/fleet/epm/packages (same operationId)
    Breaking
GET /api/fleet/epm/packages/limited
  • Path went from /epm/packages/limited to /api/fleet/epm/packages/limited (same operationId)
    Breaking
GET /api/fleet/epm/packages/{pkgName}/stats
  • Path went from /epm/packages/{pkgName}/stats to /api/fleet/epm/packages/{pkgName}/stats (same operationId)
    Breaking
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Path went from /epm/packages/{pkgName}/{pkgVersion} to /api/fleet/epm/packages/{pkgName}/{pkgVersion} (same operationId)
    Breaking
GET /api/fleet/epm/packages/{pkgName}/{pkgVersion}/{filePath}
  • Path went from /epm/packages/{pkgName}/{pkgVersion}/{filePath} to /api/fleet/epm/packages/{pkgName}/{pkgVersion}/{filePath} (same operationId)
    Breaking
GET /api/fleet/epm/packages/{pkgkey}
  • Path went from /epm/packages/{pkgkey} to /api/fleet/epm/packages/{pkgkey} (same operationId)
GET /api/fleet/epm/templates/{pkgName}/{pkgVersion}/inputs
  • Path went from /epm/templates/{pkgName}/{pkgVersion}/inputs to /api/fleet/epm/templates/{pkgName}/{pkgVersion}/inputs (same operationId)
    Breaking
GET /api/fleet/epm/verification_key_id
  • Path went from /epm/verification_key_id to /api/fleet/epm/verification_key_id (same operationId)
    Breaking
GET /api/fleet/fleet_server_hosts
  • Path went from /fleet_server_hosts to /api/fleet/fleet_server_hosts (same operationId)
    Breaking
GET /api/fleet/fleet_server_hosts/{itemId}
  • Path went from /fleet_server_hosts/{itemId} to /api/fleet/fleet_server_hosts/{itemId} (same operationId)
    Breaking
GET /api/fleet/kubernetes
  • Path went from /kubernetes to /api/fleet/kubernetes (same operationId)
    Breaking
GET /api/fleet/outputs
  • Path went from /outputs to /api/fleet/outputs (same operationId)
    Breaking
GET /api/fleet/outputs/{outputId}
  • Path went from /outputs/{outputId} to /api/fleet/outputs/{outputId} (same operationId)
    Breaking
GET /api/fleet/outputs/{outputId}/health
  • Path went from /outputs/{outputId}/health to /api/fleet/outputs/{outputId}/health (same operationId)
    Breaking
GET /api/fleet/package_policies
  • Path went from /package_policies to /api/fleet/package_policies (same operationId)
    Breaking
GET /api/fleet/package_policies/{packagePolicyId}
  • Path went from /package_policies/{packagePolicyId} to /api/fleet/package_policies/{packagePolicyId} (same operationId)
    Breaking
GET /api/fleet/proxies
  • Path went from /proxies to /api/fleet/proxies (same operationId)
    Breaking
GET /api/fleet/proxies/{itemId}
  • Path went from /proxies/{itemId} to /api/fleet/proxies/{itemId} (same operationId)
    Breaking
GET /api/fleet/settings
  • Path went from /settings to /api/fleet/settings (same operationId)
    Breaking
GET /api/fleet/uninstall_tokens
  • Path went from /uninstall_tokens to /api/fleet/uninstall_tokens (same operationId)
    Breaking
GET /api/fleet/uninstall_tokens/{uninstallTokenId}
  • Path went from /uninstall_tokens/{uninstallTokenId} to /api/fleet/uninstall_tokens/{uninstallTokenId} (same operationId)
    Breaking
POST /api/actions/connector/{id}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • config property Modified
      • crowdstrike_config, thehive_config alternatives Added
    • secrets property Modified
      • crowdstrike_secrets, thehive_secrets alternatives Added
POST /api/actions/connector/{id}/_execute
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • params property Modified
      • run_createalert alternative Modified
        • subActionParams property Modified
      • run_pushtoservice alternative Modified
        • subActionParams property Modified
POST /api/fleet/agent_download_sources
  • Path went from /agent_download_sources to /api/fleet/agent_download_sources (same operationId)
    Breaking
POST /api/fleet/agent_policies
  • Path went from /agent_policies to /api/fleet/agent_policies (same operationId)
    Breaking
POST /api/fleet/agent_policies/_bulk_get
  • Path went from /agent_policies/_bulk_get to /api/fleet/agent_policies/_bulk_get (same operationId)
    Breaking
POST /api/fleet/agent_policies/delete
  • Path went from /agent_policies/delete to /api/fleet/agent_policies/delete (same operationId)
    Breaking
POST /api/fleet/agent_policies/{agentPolicyId}/copy
  • Path went from /agent_policies/{agentPolicyId}/copy to /api/fleet/agent_policies/{agentPolicyId}/copy (same operationId)
    Breaking
POST /api/fleet/agents
  • Path went from /agents to /api/fleet/agents (same operationId)
    Breaking
POST /api/fleet/agents/actions/{actionId}/cancel
  • Path went from /agents/actions/{actionId}/cancel to /api/fleet/agents/actions/{actionId}/cancel (same operationId)
    Breaking
POST /api/fleet/agents/bulk_reassign
  • Path went from /agents/bulk_reassign to /api/fleet/agents/bulk_reassign (same operationId)
    Breaking
POST /api/fleet/agents/bulk_request_diagnostics
  • Path went from /agents/bulk_request_diagnostics to /api/fleet/agents/bulk_request_diagnostics (same operationId)
    Breaking
POST /api/fleet/agents/bulk_unenroll
  • Path went from /agents/bulk_unenroll to /api/fleet/agents/bulk_unenroll (same operationId)
    Breaking
POST /api/fleet/agents/bulk_update_agent_tags
  • Path went from /agents/bulk_update_agent_tags to /api/fleet/agents/bulk_update_agent_tags (same operationId)
    Breaking
POST /api/fleet/agents/bulk_upgrade
  • Path went from /agents/bulk_upgrade to /api/fleet/agents/bulk_upgrade (same operationId)
    Breaking
POST /api/fleet/agents/setup
  • Path went from /agents/setup to /api/fleet/agents/setup (same operationId)
    Breaking
POST /api/fleet/agents/{agentId}/actions
  • Path went from /agents/{agentId}/actions to /api/fleet/agents/{agentId}/actions (same operationId)
    Breaking
POST /api/fleet/agents/{agentId}/reassign
  • Path went from /agents/{agentId}/reassign to /api/fleet/agents/{agentId}/reassign (same operationId)
    Breaking
POST /api/fleet/agents/{agentId}/request_diagnostics
  • Path went from /agents/{agentId}/request_diagnostics to /api/fleet/agents/{agentId}/request_diagnostics (same operationId)
    Breaking
POST /api/fleet/agents/{agentId}/unenroll
  • Path went from /agents/{agentId}/unenroll to /api/fleet/agents/{agentId}/unenroll (same operationId)
    Breaking
POST /api/fleet/agents/{agentId}/upgrade
  • Path went from /agents/{agentId}/upgrade to /api/fleet/agents/{agentId}/upgrade (same operationId)
    Breaking
POST /api/fleet/enrollment-api-keys
  • Path went from /enrollment-api-keys to /api/fleet/enrollment-api-keys (same operationId)
POST /api/fleet/enrollment_api_keys
  • Path went from /enrollment_api_keys to /api/fleet/enrollment_api_keys (same operationId)
    Breaking
POST /api/fleet/epm/bulk_assets
  • Path went from /epm/bulk_assets to /api/fleet/epm/bulk_assets (same operationId)
    Breaking
POST /api/fleet/epm/packages
  • Path went from /epm/packages to /api/fleet/epm/packages (same operationId)
    Breaking
POST /api/fleet/epm/packages/_bulk
  • Path went from /epm/packages/_bulk to /api/fleet/epm/packages/_bulk (same operationId)
    Breaking
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Path went from /epm/packages/{pkgName}/{pkgVersion} to /api/fleet/epm/packages/{pkgName}/{pkgVersion} (same operationId)
    Breaking
POST /api/fleet/epm/packages/{pkgName}/{pkgVersion}/transforms/authorize
  • Path went from /epm/packages/{pkgName}/{pkgVersion}/transforms/authorize to /api/fleet/epm/packages/{pkgName}/{pkgVersion}/transforms/authorize (same operationId)
    Breaking
POST /api/fleet/epm/packages/{pkgkey}
  • Path went from /epm/packages/{pkgkey} to /api/fleet/epm/packages/{pkgkey} (same operationId)
POST /api/fleet/fleet_server_hosts
  • Path went from /fleet_server_hosts to /api/fleet/fleet_server_hosts (same operationId)
    Breaking
POST /api/fleet/health_check
  • Path went from /health_check to /api/fleet/health_check (same operationId)
    Breaking
POST /api/fleet/logstash_api_keys
  • Path went from /logstash_api_keys to /api/fleet/logstash_api_keys (same operationId)
    Breaking
POST /api/fleet/outputs
  • Path went from /outputs to /api/fleet/outputs (same operationId)
    Breaking
POST /api/fleet/package_policies
  • Path went from /package_policies to /api/fleet/package_policies (same operationId)
    Breaking
POST /api/fleet/package_policies/_bulk_get
  • Path went from /package_policies/_bulk_get to /api/fleet/package_policies/_bulk_get (same operationId)
    Breaking
POST /api/fleet/package_policies/delete
  • Path went from /package_policies/delete to /api/fleet/package_policies/delete (same operationId)
    Breaking
POST /api/fleet/package_policies/upgrade
  • Path went from /package_policies/upgrade to /api/fleet/package_policies/upgrade (same operationId)
    Breaking
POST /api/fleet/package_policies/upgrade/dryrun
  • Path went from /package_policies/upgrade/dryrun to /api/fleet/package_policies/upgrade/dryrun (same operationId)
    Breaking
POST /api/fleet/proxies
  • Path went from /proxies to /api/fleet/proxies (same operationId)
    Breaking
POST /api/fleet/service-tokens
  • Path went from /service-tokens to /api/fleet/service-tokens (same operationId)
POST /api/fleet/service_tokens
  • Path went from /service_tokens to /api/fleet/service_tokens (same operationId)
    Breaking
POST /api/fleet/setup
  • Path went from /setup to /api/fleet/setup (same operationId)
    Breaking
PUT /api/actions/connector/{id}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • config property Modified
      • crowdstrike_config, thehive_config alternatives Added
    • secrets property Modified
      • crowdstrike_secrets, thehive_secrets alternatives Added
PUT /api/fleet/agent_download_sources/{sourceId}
  • Path went from /agent_download_sources/{sourceId} to /api/fleet/agent_download_sources/{sourceId} (same operationId)
    Breaking
PUT /api/fleet/agent_policies/{agentPolicyId}
  • Path went from /agent_policies/{agentPolicyId} to /api/fleet/agent_policies/{agentPolicyId} (same operationId)
    Breaking
PUT /api/fleet/agents/{agentId}
  • Path went from /agents/{agentId} to /api/fleet/agents/{agentId} (same operationId)
    Breaking
PUT /api/fleet/agents/{agentId}/reassign
  • Path went from /agents/{agentId}/reassign to /api/fleet/agents/{agentId}/reassign (same operationId)
PUT /api/fleet/epm/packages/{pkgName}/{pkgVersion}
  • Path went from /epm/packages/{pkgName}/{pkgVersion} to /api/fleet/epm/packages/{pkgName}/{pkgVersion} (same operationId)
    Breaking
PUT /api/fleet/fleet_server_hosts/{itemId}
  • Path went from /fleet_server_hosts/{itemId} to /api/fleet/fleet_server_hosts/{itemId} (same operationId)
    Breaking
PUT /api/fleet/outputs/{outputId}
  • Path went from /outputs/{outputId} to /api/fleet/outputs/{outputId} (same operationId)
    Breaking
PUT /api/fleet/package_policies/{packagePolicyId}
  • Path went from /package_policies/{packagePolicyId} to /api/fleet/package_policies/{packagePolicyId} (same operationId)
    Breaking
PUT /api/fleet/proxies/{itemId}
  • Path went from /proxies/{itemId} to /api/fleet/proxies/{itemId} (same operationId)
    Breaking
PUT /api/fleet/settings
  • Path went from /settings to /api/fleet/settings (same operationId)
    Breaking
Removed 1 Breaking
GET /settings/enrollment
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
Elasticsearch Serverless API
111 structure changes including:
111 Modifications
Modified 111 Breaking
GET /_analyze
  • Body
  • application/json content type Modified
    • filter property Modified
      • analysis:PhoneticTokenFilter alternative Modified
        • languageset, name_type, rule_type properties Modified
GET /_application/search_application/{name}/_search
  • Response
  • 200 response Modified
    • application/json content type Modified
      • _clusters property Modified
        • details property Modified
GET /_async_search/status/{id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • _clusters property Modified
        • details property Modified
GET /_async_search/{id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • response property Modified
        • _clusters property Modified
GET /_cat/indices
  • Response
  • 200 response Modified
    • application/json content type Modified
      • dataset.size property Added
GET /_cat/indices/{index}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • dataset.size property Added
GET /_component_template
  • Response
  • 200 response Modified
    • application/json content type Modified
      • component_templates property Modified
        • component_template property Modified
GET /_component_template/{name}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • component_templates property Modified
        • component_template property Modified
GET /_data_stream
  • Query
  • verbose query parameter Added
GET /_data_stream/{name}
  • Query
  • verbose query parameter Added
GET /_enrich/_stats
  • Response
  • 200 response Modified
    • application/json content type Modified
      • cache_stats property Modified
        • hits_time_in_millis, misses_time_in_millis, size_in_bytes properties Added
GET /_eql/search/{id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • took property Modified
GET /_field_caps
  • Body
  • application/json content type Modified
    • runtime_mappings property Modified
      • fields property Added
GET /_index_template
  • Response
  • 200 response Modified
    • application/json content type Modified
      • index_templates property Modified
        • index_template property Modified
GET /_index_template/{name}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • index_templates property Modified
        • index_template property Modified
GET /_info/{target}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • ingest property Modified
        • pipelines, total properties Modified
GET /_ingest/pipeline
  • Response
  • 200 response Modified
    • application/json content type Modified
      • on_failure property Modified
        • append, user_agent properties Modified
        • dot_expander, geoip properties Modified
        • geo_grid, html_strip, redact, uri_parts properties Added
      • processors property Modified
        • append, user_agent properties Modified
        • dot_expander, geoip properties Modified
        • geo_grid, html_strip, redact, uri_parts properties Added
      • deprecated property Added
GET /_ingest/pipeline/_simulate
  • Body
  • application/json content type Modified
    • docs property Modified
      • Property is now required
        Breaking
    • pipeline property Modified
      • on_failure property Modified
        • append, user_agent properties Modified
        • dot_expander, geoip properties Modified
        • geo_grid, html_strip, redact, uri_parts properties Added
      • processors property Modified
        • append, user_agent properties Modified
        • dot_expander, geoip properties Modified
        • geo_grid, html_strip, redact, uri_parts properties Added
      • deprecated property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • docs property Modified
        • processor_results property Modified
        • tag, processor_type, status properties Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
        • error property Added
GET /_ingest/pipeline/{id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • on_failure property Modified
        • append, user_agent properties Modified
        • dot_expander, geoip properties Modified
        • geo_grid, html_strip, redact, uri_parts properties Added
      • processors property Modified
        • append, user_agent properties Modified
        • dot_expander, geoip properties Modified
        • geo_grid, html_strip, redact, uri_parts properties Added
      • deprecated property Added
GET /_ingest/pipeline/{id}/_simulate
  • Body
  • application/json content type Modified
    • docs property Modified
      • Property is now required
        Breaking
    • pipeline property Modified
      • on_failure property Modified
        • append, user_agent properties Modified
        • dot_expander, geoip properties Modified
        • geo_grid, html_strip, redact, uri_parts properties Added
      • processors property Modified
        • append, user_agent properties Modified
        • dot_expander, geoip properties Modified
        • geo_grid, html_strip, redact, uri_parts properties Added
      • deprecated property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • docs property Modified
        • processor_results property Modified
        • tag, processor_type, status properties Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
        • error property Added
GET /_mapping
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • runtime property Modified
      • mappings property Modified
        • runtime property Modified
GET /_ml/anomaly_detectors
  • Response
  • 200 response Modified
    • application/json content type Modified
      • jobs property Modified
        • analysis_config, datafeed_config properties Modified
GET /_ml/anomaly_detectors/{job_id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • jobs property Modified
        • analysis_config, datafeed_config properties Modified
GET /_ml/data_frame/analytics
  • Response
  • 200 response Modified
    • application/json content type Modified
      • data_frame_analytics property Modified
        • source property Modified
GET /_ml/data_frame/analytics/_preview
  • Body
  • application/json content type Modified
    • config property Modified
      • source property Modified
        • runtime_mappings property Modified
GET /_ml/data_frame/analytics/{id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • data_frame_analytics property Modified
        • source property Modified
GET /_ml/data_frame/analytics/{id}/_preview
  • Body
  • application/json content type Modified
    • config property Modified
      • source property Modified
        • runtime_mappings property Modified
GET /_ml/datafeeds
  • Response
  • 200 response Modified
    • application/json content type Modified
      • datafeeds property Modified
        • runtime_mappings property Modified
GET /_ml/datafeeds/_preview
  • Body
  • application/json content type Modified
    • datafeed_config property Modified
      • runtime_mappings property Modified
        • fields property Added
    • job_config property Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
      • datafeed_config property Modified
        • runtime_mappings property Modified
GET /_ml/datafeeds/{datafeed_id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • datafeeds property Modified
        • runtime_mappings property Modified
GET /_ml/datafeeds/{datafeed_id}/_preview
  • Body
  • application/json content type Modified
    • datafeed_config property Modified
      • runtime_mappings property Modified
        • fields property Added
    • job_config property Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
      • datafeed_config property Modified
        • runtime_mappings property Modified
GET /_msearch
  • Body
  • application/json content type Modified
    • msearch:MultisearchBody alternative Modified
      • runtime_mappings property Modified
        • fields property Added
GET /_resolve/index/{name}
  • Query
  • ignore_unavailable, allow_no_indices query parameters Added
GET /_scripts/painless/_execute
  • Body
  • application/json content type Modified
    • context_setup property Modified
      • query property Modified
GET /_search
  • Body
  • application/json content type Modified
    • runtime_mappings property Modified
      • fields property Added
    • rank property Removed
      • Removing a resource is always breaking unless it was deprecated before
        Breaking
  • Response
  • 200 response Modified
    • application/json content type Modified
      • _clusters property Modified
        • details property Modified
GET /_search/scroll
  • Response
  • 200 response Modified
    • application/json content type Modified
      • _clusters property Modified
        • details property Modified
GET /_search/scroll/{scroll_id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • _clusters property Modified
        • details property Modified
GET /_search/template
  • Response
  • 200 response Modified
    • application/json content type Modified
      • _clusters property Modified
        • details property Modified
GET /_settings
  • Response
  • 200 response Modified
    • application/json content type Modified
      • mappings property Modified
        • runtime property Modified
GET /_settings/{name}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • mappings property Modified
        • runtime property Modified
GET /_sql
  • Body
  • application/json content type Modified
    • runtime_mappings property Modified
      • fields property Added
GET /_transform
  • Response
  • 200 response Modified
    • application/json content type Modified
      • transforms property Modified
        • source property Modified
GET /_transform/_preview
  • Body
  • application/json content type Modified
    • source property Modified
      • runtime_mappings property Modified
        • fields property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • generated_dest_index property Modified
        • mappings property Modified
GET /_transform/{transform_id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • transforms property Modified
        • source property Modified
GET /_transform/{transform_id}/_preview
  • Body
  • application/json content type Modified
    • source property Modified
      • runtime_mappings property Modified
        • fields property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • generated_dest_index property Modified
        • mappings property Modified
GET /{index}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • mappings property Modified
        • runtime property Modified
GET /{index}/_analyze
  • Body
  • application/json content type Modified
    • filter property Modified
      • analysis:PhoneticTokenFilter alternative Modified
        • languageset, name_type, rule_type properties Modified
GET /{index}/_eql/search
  • Body
  • application/json content type Modified
    • runtime_mappings property Modified
      • fields property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • took property Modified
GET /{index}/_field_caps
  • Body
  • application/json content type Modified
    • runtime_mappings property Modified
      • fields property Added
GET /{index}/_mapping
  • Response
  • 200 response Modified
    • application/json content type Modified
      • item property Modified
        • runtime property Modified
      • mappings property Modified
        • runtime property Modified
GET /{index}/_msearch
  • Body
  • application/json content type Modified
    • msearch:MultisearchBody alternative Modified
      • runtime_mappings property Modified
        • fields property Added
GET /{index}/_mvt/{field}/{zoom}/{x}/{y}
  • Body
  • application/json content type Modified
    • runtime_mappings property Modified
      • fields property Added
GET /{index}/_search
  • Body
  • application/json content type Modified
    • runtime_mappings property Modified
      • fields property Added
    • rank property Removed
      • Removing a resource is always breaking unless it was deprecated before
        Breaking
  • Response
  • 200 response Modified
    • application/json content type Modified
      • _clusters property Modified
        • details property Modified
GET /{index}/_search/template
  • Response
  • 200 response Modified
    • application/json content type Modified
      • _clusters property Modified
        • details property Modified
GET /{index}/_settings
  • Response
  • 200 response Modified
    • application/json content type Modified
      • mappings property Modified
        • runtime property Modified
GET /{index}/_settings/{name}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • mappings property Modified
        • runtime property Modified
POST /_analyze
  • Body
  • application/json content type Modified
    • filter property Modified
      • analysis:PhoneticTokenFilter alternative Modified
        • languageset, name_type, rule_type properties Modified
POST /_application/search_application/{name}/_search
  • Response
  • 200 response Modified
    • application/json content type Modified
      • _clusters property Modified
        • details property Modified
POST /_async_search
  • Body
  • application/json content type Modified
    • runtime_mappings property Modified
      • fields property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • response property Modified
        • _clusters property Modified
POST /_component_template/{name}
  • Body
  • application/json content type Modified
    • template property Modified
      • mappings property Modified
        • runtime property Modified
POST /_field_caps
  • Body
  • application/json content type Modified
    • runtime_mappings property Modified
      • fields property Added
POST /_index_template/_simulate
  • Body
  • application/json content type Modified
    • template property Modified
      • mappings property Modified
        • runtime property Modified
  • Response
  • 200 response Modified
    • application/json content type Modified
      • template property Modified
        • mappings property Modified
POST /_index_template/_simulate/{name}
  • Body
  • application/json content type Modified
    • template property Modified
      • mappings property Modified
        • runtime property Modified
  • Response
  • 200 response Modified
    • application/json content type Modified
      • template property Modified
        • mappings property Modified
POST /_index_template/_simulate_index/{name}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • template property Modified
        • mappings property Modified
POST /_index_template/{name}
  • Body
  • application/json content type Modified
    • template property Modified
      • mappings property Modified
        • runtime property Modified
POST /_ingest/pipeline/_simulate
  • Body
  • application/json content type Modified
    • docs property Modified
      • Property is now required
        Breaking
    • pipeline property Modified
      • on_failure property Modified
        • append, user_agent properties Modified
        • dot_expander, geoip properties Modified
        • geo_grid, html_strip, redact, uri_parts properties Added
      • processors property Modified
        • append, user_agent properties Modified
        • dot_expander, geoip properties Modified
        • geo_grid, html_strip, redact, uri_parts properties Added
      • deprecated property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • docs property Modified
        • processor_results property Modified
        • tag, processor_type, status properties Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
        • error property Added
POST /_ingest/pipeline/{id}/_simulate
  • Body
  • application/json content type Modified
    • docs property Modified
      • Property is now required
        Breaking
    • pipeline property Modified
      • on_failure property Modified
        • append, user_agent properties Modified
        • dot_expander, geoip properties Modified
        • geo_grid, html_strip, redact, uri_parts properties Added
      • processors property Modified
        • append, user_agent properties Modified
        • dot_expander, geoip properties Modified
        • geo_grid, html_strip, redact, uri_parts properties Added
      • deprecated property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • docs property Modified
        • processor_results property Modified
        • tag, processor_type, status properties Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
        • error property Added
POST /_ml/anomaly_detectors/_estimate_model_memory
  • Body
  • application/json content type Modified
    • analysis_config property Modified
      • categorization_analyzer property Modified
        • _types:CategorizationAnalyzerDefinition alternative Modified
POST /_ml/anomaly_detectors/{job_id}/_update
  • Response
  • 200 response Modified
    • application/json content type Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
      • datafeed_config property Modified
        • runtime_mappings property Modified
POST /_ml/data_frame/analytics/_preview
  • Body
  • application/json content type Modified
    • config property Modified
      • source property Modified
        • runtime_mappings property Modified
POST /_ml/data_frame/analytics/{id}/_preview
  • Body
  • application/json content type Modified
    • config property Modified
      • source property Modified
        • runtime_mappings property Modified
POST /_ml/data_frame/analytics/{id}/_update
  • Response
  • 200 response Modified
    • application/json content type Modified
      • source property Modified
        • runtime_mappings property Modified
POST /_ml/datafeeds/_preview
  • Body
  • application/json content type Modified
    • datafeed_config property Modified
      • runtime_mappings property Modified
        • fields property Added
    • job_config property Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
      • datafeed_config property Modified
        • runtime_mappings property Modified
POST /_ml/datafeeds/{datafeed_id}/_preview
  • Body
  • application/json content type Modified
    • datafeed_config property Modified
      • runtime_mappings property Modified
        • fields property Added
    • job_config property Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
      • datafeed_config property Modified
        • runtime_mappings property Modified
POST /_ml/datafeeds/{datafeed_id}/_update
  • Body
  • application/json content type Modified
    • runtime_mappings property Modified
      • fields property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • runtime_mappings property Modified
        • fields property Added
POST /_msearch
  • Body
  • application/json content type Modified
    • msearch:MultisearchBody alternative Modified
      • runtime_mappings property Modified
        • fields property Added
POST /_reindex
  • Body
  • application/json content type Modified
    • source property Modified
      • runtime_mappings property Modified
        • fields property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • took property Modified
POST /_scripts/painless/_execute
  • Body
  • application/json content type Modified
    • context_setup property Modified
      • query property Modified
POST /_search
  • Body
  • application/json content type Modified
    • runtime_mappings property Modified
      • fields property Added
    • rank property Removed
      • Removing a resource is always breaking unless it was deprecated before
        Breaking
  • Response
  • 200 response Modified
    • application/json content type Modified
      • _clusters property Modified
        • details property Modified
POST /_search/scroll
  • Response
  • 200 response Modified
    • application/json content type Modified
      • _clusters property Modified
        • details property Modified
POST /_search/scroll/{scroll_id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • _clusters property Modified
        • details property Modified
POST /_search/template
  • Response
  • 200 response Modified
    • application/json content type Modified
      • _clusters property Modified
        • details property Modified
POST /_sql
  • Body
  • application/json content type Modified
    • runtime_mappings property Modified
      • fields property Added
POST /_template/{name}
  • Body
  • application/json content type Modified
    • mappings property Modified
      • runtime property Modified
        • fields property Added
POST /_transform/_preview
  • Body
  • application/json content type Modified
    • source property Modified
      • runtime_mappings property Modified
        • fields property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • generated_dest_index property Modified
        • mappings property Modified
POST /_transform/{transform_id}/_preview
  • Body
  • application/json content type Modified
    • source property Modified
      • runtime_mappings property Modified
        • fields property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • generated_dest_index property Modified
        • mappings property Modified
POST /_transform/{transform_id}/_update
  • Body
  • application/json content type Modified
    • source property Modified
      • runtime_mappings property Modified
        • fields property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • source property Modified
        • runtime_mappings property Modified
POST /{alias}/_rollover
  • Body
  • application/json content type Modified
    • conditions property Modified
      • max_age_millis property Modified
    • mappings property Modified
      • runtime property Modified
        • fields property Added
POST /{alias}/_rollover/{new_index}
  • Body
  • application/json content type Modified
    • conditions property Modified
      • max_age_millis property Modified
    • mappings property Modified
      • runtime property Modified
        • fields property Added
POST /{index}/_analyze
  • Body
  • application/json content type Modified
    • filter property Modified
      • analysis:PhoneticTokenFilter alternative Modified
        • languageset, name_type, rule_type properties Modified
POST /{index}/_async_search
  • Body
  • application/json content type Modified
    • runtime_mappings property Modified
      • fields property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • response property Modified
        • _clusters property Modified
POST /{index}/_delete_by_query
  • Response
  • 200 response Modified
    • application/json content type Modified
      • throttled_millis, throttled_until_millis, took properties Modified
POST /{index}/_eql/search
  • Body
  • application/json content type Modified
    • runtime_mappings property Modified
      • fields property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • took property Modified
POST /{index}/_field_caps
  • Body
  • application/json content type Modified
    • runtime_mappings property Modified
      • fields property Added
POST /{index}/_mapping
  • Body
  • application/json content type Modified
    • runtime property Modified
      • fields property Added
POST /{index}/_msearch
  • Body
  • application/json content type Modified
    • msearch:MultisearchBody alternative Modified
      • runtime_mappings property Modified
        • fields property Added
POST /{index}/_mvt/{field}/{zoom}/{x}/{y}
  • Body
  • application/json content type Modified
    • runtime_mappings property Modified
      • fields property Added
POST /{index}/_pit
  • Response
  • 200 response Modified
    • application/json content type Modified
      • _shards property Added
  • Body
  • application/json content type Added
POST /{index}/_search
  • Body
  • application/json content type Modified
    • runtime_mappings property Modified
      • fields property Added
    • rank property Removed
      • Removing a resource is always breaking unless it was deprecated before
        Breaking
  • Response
  • 200 response Modified
    • application/json content type Modified
      • _clusters property Modified
        • details property Modified
POST /{index}/_search/template
  • Response
  • 200 response Modified
    • application/json content type Modified
      • _clusters property Modified
        • details property Modified
POST /{index}/_update_by_query
  • Response
  • 200 response Modified
    • application/json content type Modified
      • took, throttled_millis, throttled_until_millis properties Modified
PUT /_component_template/{name}
  • Body
  • application/json content type Modified
    • template property Modified
      • mappings property Modified
        • runtime property Modified
PUT /_index_template/{name}
  • Body
  • application/json content type Modified
    • template property Modified
      • mappings property Modified
        • runtime property Modified
PUT /_ingest/pipeline/{id}
  • Body
  • application/json content type Modified
    • on_failure property Modified
      • append property Modified
        • value property Modified
          • Combinator is now oneOf
      • dot_expander property Modified
        • override property Added
      • geoip property Modified
        • download_database_on_pipeline_creation property Added
      • user_agent property Modified
        • options property Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
        • properties, extract_device_type properties Added
      • geo_grid, html_strip, redact, uri_parts properties Added
    • processors property Modified
      • append property Modified
        • value property Modified
          • Combinator is now oneOf
      • dot_expander property Modified
        • override property Added
      • geoip property Modified
        • download_database_on_pipeline_creation property Added
      • user_agent property Modified
        • options property Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
        • properties, extract_device_type properties Added
      • geo_grid, html_strip, redact, uri_parts properties Added
    • deprecated property Added
PUT /_ml/anomaly_detectors/{job_id}
  • Body
  • application/json content type Modified
    • analysis_config property Modified
      • categorization_analyzer property Modified
        • _types:CategorizationAnalyzerDefinition alternative Modified
    • datafeed_config property Modified
      • runtime_mappings property Modified
        • fields property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • analysis_config property Modified
        • categorization_analyzer property Modified
      • datafeed_config property Modified
        • runtime_mappings property Modified
PUT /_ml/data_frame/analytics/{id}
  • Body
  • application/json content type Modified
    • source property Modified
      • runtime_mappings property Modified
        • fields property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • source property Modified
        • runtime_mappings property Modified
PUT /_ml/datafeeds/{datafeed_id}
  • Body
  • application/json content type Modified
    • runtime_mappings property Modified
      • fields property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • runtime_mappings property Modified
        • fields property Added
PUT /_template/{name}
  • Body
  • application/json content type Modified
    • mappings property Modified
      • runtime property Modified
        • fields property Added
PUT /_transform/{transform_id}
  • Body
  • application/json content type Modified
    • source property Modified
      • runtime_mappings property Modified
        • fields property Added
PUT /{index}
  • Body
  • application/json content type Modified
    • mappings property Modified
      • runtime property Modified
        • fields property Added
PUT /{index}/_mapping
  • Body
  • application/json content type Modified
    • runtime property Modified
      • fields property Added
Kibana API

The new options in the connector endpoints relate to https://github.com/elastic/kibana/issues/180255

5 structure changes including:
5 Modifications
Modified 5
GET /api/actions/connector/{connectorId}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • Connectors_connector_response_properties_cases_webhook alternative Modified
        • config property Modified
GET /api/actions/connectors
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • Connectors_connector_response_properties_cases_webhook alternative Modified
        • config property Modified
POST /api/actions/connector
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • Connectors_create_connector_request_cases_webhook alternative Modified
      • config property Modified
        • authType, ca, certType, verificationMode properties Added
      • secrets property Modified
        • crt, key, pfx properties Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • Connectors_connector_response_properties_cases_webhook alternative Modified
        • config property Modified
POST /api/actions/connector/{connectorId}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • Connectors_create_connector_request_cases_webhook alternative Modified
      • config property Modified
        • authType, ca, certType, verificationMode properties Added
      • secrets property Modified
        • crt, key, pfx properties Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • Connectors_connector_response_properties_cases_webhook alternative Modified
        • config property Modified
PUT /api/actions/connector/{connectorId}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • Connectors_update_connector_request_cases_webhook alternative Modified
      • config property Modified
        • authType, ca, certType, verificationMode properties Added
      • secrets property Modified
        • crt, key, pfx properties Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • Connectors_connector_response_properties_cases_webhook alternative Modified
        • config property Modified
Kibana Serverless API

Please note: The additions and removals in the connector endpoints are due to changes to the method for generating the documentation, rather than changes to the actual APIs.

35 structure changes including:
14 Additions
14 Modifications
7 Removals
Modified 14
POST /agent_policies/_bulk_get
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • items property Modified
        • package_policies property Modified
  • Query
  • format query parameter Added
POST /agent_policies
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • package_policies property Modified
GET /package_policies/{packagePolicyId}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • policy_id property Modified
          • Full types went from string to string | null
GET /package_policies
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • items property Modified
        • policy_id property Modified
          • Full types went from string to string | null
GET /enrollment_api_keys
  • Query
  • perPage, page, kuery query parameters Added
GET /agent_policies/{agentPolicyId}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • package_policies property Modified
  • Query
  • format query parameter Added
GET /agent_policies
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • items property Modified
        • package_policies property Modified
  • Query
  • format query parameter Added
POST /agent_policies/{agentPolicyId}/copy
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • package_policies property Modified
  • Query
  • format query parameter Added
POST /enrollment_api_keys
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Added
POST /package_policies
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • policy_id property Modified
      • Full types went from string to string | null
    • output_id property Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • policy_id property Modified
          • Full types went from string to string | null
POST /package_policies/_bulk_get
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • items property Modified
        • policy_id property Modified
          • Full types went from string to string | null
POST /package_policies/upgrade/dryrun
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • diff property Modified
        • policy_id property Modified
          • Full types went from string to string | null
PUT /agent_policies/{agentPolicyId}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • package_policies property Modified
  • Query
  • format query parameter Added
PUT /package_policies/{packagePolicyId}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • policy_id property Modified
      • Full types went from string to string | null
    • output_id property Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • policy_id property Modified
          • Full types went from string to string | null
Removed 7
DELETE /api/actions/connector/{connectorId}
GET /api/actions/connector/{connectorId}
GET /api/actions/connector_types
GET /api/actions/connectors
POST /api/actions/connector
POST /api/actions/connector/{connectorId}
PUT /api/actions/connector/{connectorId}
Added 14
PUT /api/actions/connector/{id}
PUT /api/actions/action/{id}
POST /api/actions/connector/{id}/_execute
POST /api/actions/connector/{id}
POST /api/actions/action/{id}/_execute
POST /api/actions/action
GET /api/actions/list_action_types
GET /api/actions/connectors
GET /api/actions/connector_types
GET /api/actions/connector/{id}
GET /api/actions/action/{id}
GET /api/actions
DELETE /api/actions/connector/{id}
DELETE /api/actions/action/{id}
Kibana API

Please note: The additions, removals, and "breaking changes" in the connector endpoints are due to changes to the method for generating the documentation, rather than changes to the actual APIs.

43 structure changes including:
8 Breaking changes
14 Additions
14 Modifications
15 Removals
Modified 14
PUT /package_policies/{packagePolicyId}
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • policy_id property Modified
      • Full types went from string to string | null
    • output_id property Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • policy_id property Modified
          • Full types went from string to string | null
PUT /agent_policies/{agentPolicyId}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • package_policies property Modified
  • Query
  • format query parameter Added
POST /package_policies/upgrade/dryrun
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • diff property Modified
        • policy_id property Modified
          • Full types went from string to string | null
POST /package_policies/_bulk_get
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • items property Modified
        • policy_id property Modified
          • Full types went from string to string | null
POST /package_policies
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Modified
    • policy_id property Modified
      • Full types went from string to string | null
    • output_id property Added
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • policy_id property Modified
          • Full types went from string to string | null
POST /enrollment_api_keys
  • Body
  • application/json; Elastic-Api-Version=2023-10-31 content type Added
POST /agent_policies/{agentPolicyId}/copy
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • package_policies property Modified
  • Query
  • format query parameter Added
POST /agent_policies/_bulk_get
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • items property Modified
        • package_policies property Modified
  • Query
  • format query parameter Added
POST /agent_policies
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • package_policies property Modified
GET /package_policies/{packagePolicyId}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • policy_id property Modified
          • Full types went from string to string | null
GET /package_policies
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • items property Modified
        • policy_id property Modified
          • Full types went from string to string | null
GET /enrollment_api_keys
  • Query
  • perPage, page, kuery query parameters Added
GET /agent_policies/{agentPolicyId}
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • item property Modified
        • package_policies property Modified
  • Query
  • format query parameter Added
GET /agent_policies
  • Response
  • 200 response Modified
    • application/json; Elastic-Api-Version=2023-10-31 content type Modified
      • items property Modified
        • package_policies property Modified
  • Query
  • format query parameter Added
Removed 15 Breaking
DELETE /api/actions/action/{actionId}
DELETE /api/actions/connector/{connectorId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/actions
GET /api/actions/action/{actionId}
GET /api/actions/connector/{connectorId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/actions/connector_types
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/actions/connectors
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
GET /api/actions/list_action_types
POST /api/actions
POST /api/actions/action/{actionId}/_execute
POST /api/actions/connector
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/actions/connector/{connectorId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
POST /api/actions/connector/{connectorId}/_execute
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
PUT /api/actions/action/{actionId}
PUT /api/actions/connector/{connectorId}
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
Added 14
PUT /api/actions/connector/{id}
PUT /api/actions/action/{id}
POST /api/actions/connector/{id}/_execute
POST /api/actions/connector/{id}
POST /api/actions/action/{id}/_execute
POST /api/actions/action
GET /api/actions/list_action_types
GET /api/actions/connectors
GET /api/actions/connector_types
GET /api/actions/connector/{id}
GET /api/actions/action/{id}
GET /api/actions
DELETE /api/actions/connector/{id}
DELETE /api/actions/action/{id}