Change Updates

Do not miss any kibana_wip API changes, ever again

Subscribe to the kibana_wip API changelog to be up to date on recent changes.

RSS
kibana_wip

Mar 11, 2025

main
2023-10-31
Compare

API structure has changed

13 structure changes including:
13 Modifications
Modified 13 Breaking
DELETE /api/detection_engine/rules
  • Response
  • 200 response Modified
    • application/json content type Modified
      • NewTermsRuleResponseFields alternative Modified
        • history_window_start property Modified
          • Type is now string(nonempty)
DELETE /api/detection_engine/rules/_bulk_delete
  • Response
  • 200 response Modified
    • application/json content type Modified
      • NewTermsRuleResponseFields alternative Modified
        • history_window_start property Modified
          • Type is now string(nonempty)
GET /api/detection_engine/rules
  • Response
  • 200 response Modified
    • application/json content type Modified
      • NewTermsRuleResponseFields alternative Modified
        • history_window_start property Modified
          • Type is now string(nonempty)
GET /api/detection_engine/rules/_find
  • Response
  • 200 response Modified
    • application/json content type Modified
      • data property Modified
        • NewTermsRuleResponseFields alternative Modified
PATCH /api/detection_engine/rules
  • Body
  • application/json content type Modified
    • NewTermsRulePatchFields alternative Modified
      • history_window_start property Modified
        • Type is now string(nonempty)
  • Response
  • 200 response Modified
    • application/json content type Modified
      • NewTermsRuleResponseFields alternative Modified
        • history_window_start property Modified
          • Type is now string(nonempty)
PATCH /api/detection_engine/rules/_bulk_update
  • Body
  • application/json content type Modified
    • NewTermsRulePatchFields alternative Modified
      • history_window_start property Modified
        • Type is now string(nonempty)
  • Response
  • 200 response Modified
    • application/json content type Modified
      • NewTermsRuleResponseFields alternative Modified
        • history_window_start property Modified
          • Type is now string(nonempty)
POST /api/detection_engine/rules
  • Body
  • application/json content type Modified
    • NewTermsRuleCreateFields alternative Modified
      • history_window_start property Modified
        • Type is now string(nonempty)
  • Response
  • 200 response Modified
    • application/json content type Modified
      • NewTermsRuleResponseFields alternative Modified
        • history_window_start property Modified
          • Type is now string(nonempty)
POST /api/detection_engine/rules/_bulk_action
  • Response
  • 200 response Modified
    • application/json content type Modified
      • BulkEditActionResponse alternative Modified
        • attributes property Modified
POST /api/detection_engine/rules/_bulk_create
  • Body
  • application/json content type Modified
    • NewTermsRuleCreateFields alternative Modified
      • history_window_start property Modified
        • Type is now string(nonempty)
  • Response
  • 200 response Modified
    • application/json content type Modified
      • NewTermsRuleResponseFields alternative Modified
        • history_window_start property Modified
          • Type is now string(nonempty)
POST /api/detection_engine/rules/_bulk_delete
  • Response
  • 200 response Modified
    • application/json content type Modified
      • NewTermsRuleResponseFields alternative Modified
        • history_window_start property Modified
          • Type is now string(nonempty)
POST /api/detection_engine/rules/preview
  • Body
  • application/json content type Modified
    • RulePreviewParams alternative Modified
      • data_view_id, event_category_override, filters, index, tiebreaker_field, timestamp_field properties Added
    • RulePreviewParams alternative Modified
      • language, query properties Modified
        • Properties are no longer required
      • data_view_id, filters, index, saved_id properties Added
    • RulePreviewParams alternative Modified
      • query, language properties Modified
        • Properties are no longer required
      • saved_id, data_view_id, filters, index properties Added
    • RulePreviewParams alternative Modified
      • alert_suppression property Modified
        • duration property Modified
          • Property is now required
            Breaking
        • group_by, missing_fields_strategy properties Removed
          • Removing a resource is always breaking unless it was deprecated before
            Breaking
      • language property Modified
        • Property is no longer required
      • threshold, data_view_id, filters, index, saved_id properties Added
    • RulePreviewParams alternative Modified
      • language property Modified
        • Property is no longer required
      • threat_index, threat_mapping, threat_query, concurrent_searches, data_view_id, filters, index, items_per_search, saved_id, threat_filters, threat_indicator_path, threat_language properties Added
    • RulePreviewParams alternative Modified
      • language, query properties Removed
        • Removing a resource is always breaking unless it was deprecated before
          Breaking
      • anomaly_threshold property Added
      • machine_learning_job_id property Added
        • string-1, array-2 properties Added
    • RulePreviewParams alternative Modified
      • language property Modified
        • Property is no longer required
      • history_window_start, new_terms_fields, data_view_id, filters, index properties Added
PUT /api/detection_engine/rules
  • Body
  • application/json content type Modified
    • NewTermsRuleCreateFields alternative Modified
      • history_window_start property Modified
        • Type is now string(nonempty)
  • Response
  • 200 response Modified
    • application/json content type Modified
      • NewTermsRuleResponseFields alternative Modified
        • history_window_start property Modified
          • Type is now string(nonempty)
PUT /api/detection_engine/rules/_bulk_update
  • Body
  • application/json content type Modified
    • NewTermsRuleCreateFields alternative Modified
      • history_window_start property Modified
        • Type is now string(nonempty)
  • Response
  • 200 response Modified
    • application/json content type Modified
      • NewTermsRuleResponseFields alternative Modified
        • history_window_start property Modified
          • Type is now string(nonempty)