1 structure change including:
1 Modification
Modified
1
POST /api/detection_engine/rules/_bulk_action
- Body
-
application/json content type Modified
-
BulkEditRules alternative Modified
-
edit property Modified
- BulkActionEditPayloadIndexPatterns alternative Modified
-
edit property Modified
-
BulkEditRules alternative Modified
15 structure changes including:
10 Modifications
5 Removals
Modified
10
Breaking
DELETE /api/detection_engine/rules
- Response
-
200 response Modified
-
application/json content type Modified
-
EqlRuleResponseFields alternative Modified
- actions property Modified
-
QueryRuleResponseFields alternative Modified
- actions property Modified
-
SavedQueryRuleResponseFields alternative Modified
- actions property Modified
-
ThresholdRuleResponseFields alternative Modified
- actions property Modified
-
ThreatMatchRuleResponseFields alternative Modified
- actions property Modified
-
MachineLearningRuleResponseFields alternative Modified
- actions property Modified
-
NewTermsRuleResponseFields alternative Modified
- actions property Modified
-
EsqlRuleResponseFields alternative Modified
- actions property Modified
-
EqlRuleResponseFields alternative Modified
-
application/json content type Modified
GET /api/detection_engine/rules
- Response
-
200 response Modified
-
application/json content type Modified
-
EqlRuleResponseFields alternative Modified
- actions property Modified
-
QueryRuleResponseFields alternative Modified
- actions property Modified
-
SavedQueryRuleResponseFields alternative Modified
- actions property Modified
-
ThresholdRuleResponseFields alternative Modified
- actions property Modified
-
ThreatMatchRuleResponseFields alternative Modified
- actions property Modified
-
MachineLearningRuleResponseFields alternative Modified
- actions property Modified
-
NewTermsRuleResponseFields alternative Modified
- actions property Modified
-
EsqlRuleResponseFields alternative Modified
- actions property Modified
-
EqlRuleResponseFields alternative Modified
-
application/json content type Modified
GET /api/detection_engine/rules/_find
- Response
-
200 response Modified
-
application/json content type Modified
-
data property Modified
- EqlRuleResponseFields, QueryRuleResponseFields, SavedQueryRuleResponseFields, ThresholdRuleResponseFields, ThreatMatchRuleResponseFields, MachineLearningRuleResponseFields, NewTermsRuleResponseFields, EsqlRuleResponseFields alternatives Modified
-
data property Modified
-
application/json content type Modified
GET /api/detection_engine/signals/migration_status
- Verb went from
POST
toGET
(same operationId)
PATCH /api/detection_engine/rules
- Body
-
application/json content type Modified
-
EqlRulePatchFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
QueryRulePatchFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
SavedQueryRulePatchFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
ThresholdRulePatchFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
ThreatMatchRulePatchFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
MachineLearningRulePatchFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
NewTermsRulePatchFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
EsqlRulePatchProps alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
EqlRulePatchFields alternative Modified
- Response
-
200 response Modified
-
application/json content type Modified
-
EqlRuleResponseFields alternative Modified
- actions property Modified
-
QueryRuleResponseFields alternative Modified
- actions property Modified
-
SavedQueryRuleResponseFields alternative Modified
- actions property Modified
-
ThresholdRuleResponseFields alternative Modified
- actions property Modified
-
ThreatMatchRuleResponseFields alternative Modified
- actions property Modified
-
MachineLearningRuleResponseFields alternative Modified
- actions property Modified
-
NewTermsRuleResponseFields alternative Modified
- actions property Modified
-
EsqlRuleResponseFields alternative Modified
- actions property Modified
-
EqlRuleResponseFields alternative Modified
-
application/json content type Modified
POST /api/detection_engine/rules
- Body
-
application/json content type Modified
-
EqlRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
QueryRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
SavedQueryRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
ThresholdRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
ThreatMatchRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
MachineLearningRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
NewTermsRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
EsqlRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
EqlRuleCreateFields alternative Modified
- Response
-
200 response Modified
-
application/json content type Modified
-
EqlRuleResponseFields alternative Modified
- actions property Modified
-
QueryRuleResponseFields alternative Modified
- actions property Modified
-
SavedQueryRuleResponseFields alternative Modified
- actions property Modified
-
ThresholdRuleResponseFields alternative Modified
- actions property Modified
-
ThreatMatchRuleResponseFields alternative Modified
- actions property Modified
-
MachineLearningRuleResponseFields alternative Modified
- actions property Modified
-
NewTermsRuleResponseFields alternative Modified
- actions property Modified
-
EsqlRuleResponseFields alternative Modified
- actions property Modified
-
EqlRuleResponseFields alternative Modified
-
application/json content type Modified
POST /api/detection_engine/rules/_bulk_action
- Body
-
application/json content type Modified
-
BulkEditRules alternative Modified
-
edit property Modified
- BulkActionEditPayloadRuleActions alternative Modified
-
edit property Modified
-
BulkEditRules alternative Modified
- Response
-
200 response Modified
-
application/json content type Modified
-
BulkEditActionResponse alternative Modified
- attributes property Modified
-
BulkEditActionResponse alternative Modified
-
application/json content type Modified
POST /api/detection_engine/rules/preview
- Body
-
application/json content type Modified
-
RulePreviewParams alternative Modified
-
actions property Modified
- alerts_filter property Modified
- data_view_id, event_category_override, filters, index, tiebreaker_field, timestamp_field properties Added
-
actions property Modified
-
RulePreviewParams alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
language, query properties Modified
- Properties are no longer required
- data_view_id, filters, index, saved_id properties Added
-
actions property Modified
-
RulePreviewParams alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
query, language properties Modified
- Properties are no longer required
- saved_id, data_view_id, filters, index properties Added
-
actions property Modified
-
RulePreviewParams alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
alert_suppression property Modified
-
duration property Modified
-
Property is now required Breaking
-
Property is now required
-
group_by, missing_fields_strategy properties Removed
-
Removing a resource is always breaking unless it was deprecated before Breaking
-
Removing a resource is always breaking unless it was deprecated before
-
duration property Modified
-
language property Modified
- Property is no longer required
- threshold, data_view_id, filters, index, saved_id properties Added
-
actions property Modified
-
RulePreviewParams alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
language property Modified
- Property is no longer required
- threat_index, threat_mapping, threat_query, concurrent_searches, data_view_id, filters, index, items_per_search, saved_id, threat_filters, threat_indicator_path, threat_language properties Added
-
actions property Modified
-
RulePreviewParams alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
language, query properties Removed
-
Removing a resource is always breaking unless it was deprecated before Breaking
-
Removing a resource is always breaking unless it was deprecated before
- anomaly_threshold, array-2 properties Added
-
actions property Modified
-
RulePreviewParams alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
language property Modified
- Property is no longer required
- history_window_start, new_terms_fields, data_view_id, filters, index properties Added
-
actions property Modified
-
RulePreviewParams alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
RulePreviewParams alternative Modified
POST /api/detection_engine/signals/assignees
- Response
-
200 response Modified
- application/ndjson content type Added
PUT /api/detection_engine/rules
- Body
-
application/json content type Modified
-
EqlRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
QueryRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
SavedQueryRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
ThresholdRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
ThreatMatchRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
MachineLearningRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
NewTermsRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
EsqlRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
EqlRuleCreateFields alternative Modified
- Response
-
200 response Modified
-
application/json content type Modified
-
EqlRuleResponseFields alternative Modified
- actions property Modified
-
QueryRuleResponseFields alternative Modified
- actions property Modified
-
SavedQueryRuleResponseFields alternative Modified
- actions property Modified
-
ThresholdRuleResponseFields alternative Modified
- actions property Modified
-
ThreatMatchRuleResponseFields alternative Modified
- actions property Modified
-
MachineLearningRuleResponseFields alternative Modified
- actions property Modified
-
NewTermsRuleResponseFields alternative Modified
- actions property Modified
-
EsqlRuleResponseFields alternative Modified
- actions property Modified
-
EqlRuleResponseFields alternative Modified
-
application/json content type Modified
Removed
5
DELETE /api/detection_engine/rules/_bulk_delete
PATCH /api/detection_engine/rules/_bulk_update
POST /api/detection_engine/rules/_bulk_create
POST /api/detection_engine/rules/_bulk_delete
PUT /api/detection_engine/rules/_bulk_update
15 structure changes including:
15 Modifications
Modified
15
Breaking
DELETE /api/detection_engine/rules
- Response
-
200 response Modified
-
application/json content type Modified
-
EqlRuleResponseFields alternative Modified
- actions property Modified
-
QueryRuleResponseFields alternative Modified
- actions property Modified
-
SavedQueryRuleResponseFields alternative Modified
- actions property Modified
-
ThresholdRuleResponseFields alternative Modified
- actions property Modified
-
ThreatMatchRuleResponseFields alternative Modified
- actions property Modified
-
MachineLearningRuleResponseFields alternative Modified
- actions property Modified
-
NewTermsRuleResponseFields alternative Modified
- actions property Modified
-
EsqlRuleResponseFields alternative Modified
- actions property Modified
-
EqlRuleResponseFields alternative Modified
-
application/json content type Modified
DELETE /api/detection_engine/rules/_bulk_delete
- Response
-
200 response Modified
-
application/json content type Modified
-
EqlRuleResponseFields alternative Modified
- actions property Modified
-
QueryRuleResponseFields alternative Modified
- actions property Modified
-
SavedQueryRuleResponseFields alternative Modified
- actions property Modified
-
ThresholdRuleResponseFields alternative Modified
- actions property Modified
-
ThreatMatchRuleResponseFields alternative Modified
- actions property Modified
-
MachineLearningRuleResponseFields alternative Modified
- actions property Modified
-
NewTermsRuleResponseFields alternative Modified
- actions property Modified
-
EsqlRuleResponseFields alternative Modified
- actions property Modified
-
EqlRuleResponseFields alternative Modified
-
application/json content type Modified
GET /api/detection_engine/rules
- Response
-
200 response Modified
-
application/json content type Modified
-
EqlRuleResponseFields alternative Modified
- actions property Modified
-
QueryRuleResponseFields alternative Modified
- actions property Modified
-
SavedQueryRuleResponseFields alternative Modified
- actions property Modified
-
ThresholdRuleResponseFields alternative Modified
- actions property Modified
-
ThreatMatchRuleResponseFields alternative Modified
- actions property Modified
-
MachineLearningRuleResponseFields alternative Modified
- actions property Modified
-
NewTermsRuleResponseFields alternative Modified
- actions property Modified
-
EsqlRuleResponseFields alternative Modified
- actions property Modified
-
EqlRuleResponseFields alternative Modified
-
application/json content type Modified
GET /api/detection_engine/rules/_find
- Response
-
200 response Modified
-
application/json content type Modified
-
data property Modified
- EqlRuleResponseFields, QueryRuleResponseFields, SavedQueryRuleResponseFields, ThresholdRuleResponseFields, ThreatMatchRuleResponseFields, MachineLearningRuleResponseFields, NewTermsRuleResponseFields, EsqlRuleResponseFields alternatives Modified
-
data property Modified
-
application/json content type Modified
PATCH /api/detection_engine/rules
- Body
-
application/json content type Modified
-
EqlRulePatchFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
QueryRulePatchFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
SavedQueryRulePatchFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
ThresholdRulePatchFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
ThreatMatchRulePatchFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
MachineLearningRulePatchFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
NewTermsRulePatchFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
EsqlRulePatchProps alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
EqlRulePatchFields alternative Modified
- Response
-
200 response Modified
-
application/json content type Modified
-
EqlRuleResponseFields alternative Modified
- actions property Modified
-
QueryRuleResponseFields alternative Modified
- actions property Modified
-
SavedQueryRuleResponseFields alternative Modified
- actions property Modified
-
ThresholdRuleResponseFields alternative Modified
- actions property Modified
-
ThreatMatchRuleResponseFields alternative Modified
- actions property Modified
-
MachineLearningRuleResponseFields alternative Modified
- actions property Modified
-
NewTermsRuleResponseFields alternative Modified
- actions property Modified
-
EsqlRuleResponseFields alternative Modified
- actions property Modified
-
EqlRuleResponseFields alternative Modified
-
application/json content type Modified
PATCH /api/detection_engine/rules/_bulk_update
- Body
-
application/json content type Modified
-
EqlRulePatchFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
QueryRulePatchFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
SavedQueryRulePatchFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
ThresholdRulePatchFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
ThreatMatchRulePatchFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
MachineLearningRulePatchFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
NewTermsRulePatchFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
EsqlRulePatchProps alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
EqlRulePatchFields alternative Modified
- Response
-
200 response Modified
-
application/json content type Modified
-
EqlRuleResponseFields alternative Modified
- actions property Modified
-
QueryRuleResponseFields alternative Modified
- actions property Modified
-
SavedQueryRuleResponseFields alternative Modified
- actions property Modified
-
ThresholdRuleResponseFields alternative Modified
- actions property Modified
-
ThreatMatchRuleResponseFields alternative Modified
- actions property Modified
-
MachineLearningRuleResponseFields alternative Modified
- actions property Modified
-
NewTermsRuleResponseFields alternative Modified
- actions property Modified
-
EsqlRuleResponseFields alternative Modified
- actions property Modified
-
EqlRuleResponseFields alternative Modified
-
application/json content type Modified
POST /api/detection_engine/rules
- Body
-
application/json content type Modified
-
EqlRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
QueryRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
SavedQueryRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
ThresholdRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
ThreatMatchRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
MachineLearningRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
NewTermsRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
EsqlRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
EqlRuleCreateFields alternative Modified
- Response
-
200 response Modified
-
application/json content type Modified
-
EqlRuleResponseFields alternative Modified
- actions property Modified
-
QueryRuleResponseFields alternative Modified
- actions property Modified
-
SavedQueryRuleResponseFields alternative Modified
- actions property Modified
-
ThresholdRuleResponseFields alternative Modified
- actions property Modified
-
ThreatMatchRuleResponseFields alternative Modified
- actions property Modified
-
MachineLearningRuleResponseFields alternative Modified
- actions property Modified
-
NewTermsRuleResponseFields alternative Modified
- actions property Modified
-
EsqlRuleResponseFields alternative Modified
- actions property Modified
-
EqlRuleResponseFields alternative Modified
-
application/json content type Modified
POST /api/detection_engine/rules/_bulk_action
- Body
-
application/json content type Modified
-
BulkEditRules alternative Modified
-
edit property Modified
- BulkActionEditPayloadRuleActions alternative Modified
-
edit property Modified
-
BulkEditRules alternative Modified
- Response
-
200 response Modified
-
application/json content type Modified
-
BulkEditActionResponse alternative Modified
- attributes property Modified
-
BulkEditActionResponse alternative Modified
-
application/json content type Modified
POST /api/detection_engine/rules/_bulk_create
- Body
-
application/json content type Modified
-
EqlRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
QueryRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
SavedQueryRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
ThresholdRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
ThreatMatchRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
MachineLearningRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
NewTermsRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
EsqlRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
EqlRuleCreateFields alternative Modified
- Response
-
200 response Modified
-
application/json content type Modified
-
EqlRuleResponseFields alternative Modified
- actions property Modified
-
QueryRuleResponseFields alternative Modified
- actions property Modified
-
SavedQueryRuleResponseFields alternative Modified
- actions property Modified
-
ThresholdRuleResponseFields alternative Modified
- actions property Modified
-
ThreatMatchRuleResponseFields alternative Modified
- actions property Modified
-
MachineLearningRuleResponseFields alternative Modified
- actions property Modified
-
NewTermsRuleResponseFields alternative Modified
- actions property Modified
-
EsqlRuleResponseFields alternative Modified
- actions property Modified
-
EqlRuleResponseFields alternative Modified
-
application/json content type Modified
POST /api/detection_engine/rules/_bulk_delete
- Response
-
200 response Modified
-
application/json content type Modified
-
EqlRuleResponseFields alternative Modified
- actions property Modified
-
QueryRuleResponseFields alternative Modified
- actions property Modified
-
SavedQueryRuleResponseFields alternative Modified
- actions property Modified
-
ThresholdRuleResponseFields alternative Modified
- actions property Modified
-
ThreatMatchRuleResponseFields alternative Modified
- actions property Modified
-
MachineLearningRuleResponseFields alternative Modified
- actions property Modified
-
NewTermsRuleResponseFields alternative Modified
- actions property Modified
-
EsqlRuleResponseFields alternative Modified
- actions property Modified
-
EqlRuleResponseFields alternative Modified
-
application/json content type Modified
POST /api/detection_engine/rules/preview
- Body
-
application/json content type Modified
-
RulePreviewParams alternative Modified
-
actions property Modified
- alerts_filter property Modified
- data_view_id, event_category_override, filters, index, tiebreaker_field, timestamp_field properties Added
-
actions property Modified
-
RulePreviewParams alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
language, query properties Modified
- Properties are no longer required
- data_view_id, filters, index, saved_id properties Added
-
actions property Modified
-
RulePreviewParams alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
query, language properties Modified
- Properties are no longer required
- saved_id, data_view_id, filters, index properties Added
-
actions property Modified
-
RulePreviewParams alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
alert_suppression property Modified
-
duration property Modified
-
Property is now required Breaking
-
Property is now required
-
group_by, missing_fields_strategy properties Removed
-
Removing a resource is always breaking unless it was deprecated before Breaking
-
Removing a resource is always breaking unless it was deprecated before
-
duration property Modified
-
language property Modified
- Property is no longer required
- threshold, data_view_id, filters, index, saved_id properties Added
-
actions property Modified
-
RulePreviewParams alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
language property Modified
- Property is no longer required
- threat_index, threat_mapping, threat_query, concurrent_searches, data_view_id, filters, index, items_per_search, saved_id, threat_filters, threat_indicator_path, threat_language properties Added
-
actions property Modified
-
RulePreviewParams alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
language, query properties Removed
-
Removing a resource is always breaking unless it was deprecated before Breaking
-
Removing a resource is always breaking unless it was deprecated before
- anomaly_threshold property Added
-
machine_learning_job_id property Added
- string-1, array-2 properties Added
-
actions property Modified
-
RulePreviewParams alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
language property Modified
- Property is no longer required
- history_window_start, new_terms_fields, data_view_id, filters, index properties Added
-
actions property Modified
-
RulePreviewParams alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
RulePreviewParams alternative Modified
POST /api/detection_engine/signals/assignees
- Response
-
200 response Modified
-
application/ndjson content type Removed
-
Removing a resource is always breaking unless it was deprecated before Breaking
-
Removing a resource is always breaking unless it was deprecated before
-
application/ndjson content type Removed
POST /api/detection_engine/signals/migration_status
- Verb went from
GET
toPOST
(same operationId)
PUT /api/detection_engine/rules
- Body
-
application/json content type Modified
-
EqlRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
QueryRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
SavedQueryRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
ThresholdRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
ThreatMatchRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
MachineLearningRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
NewTermsRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
EsqlRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
EqlRuleCreateFields alternative Modified
- Response
-
200 response Modified
-
application/json content type Modified
-
EqlRuleResponseFields alternative Modified
- actions property Modified
-
QueryRuleResponseFields alternative Modified
- actions property Modified
-
SavedQueryRuleResponseFields alternative Modified
- actions property Modified
-
ThresholdRuleResponseFields alternative Modified
- actions property Modified
-
ThreatMatchRuleResponseFields alternative Modified
- actions property Modified
-
MachineLearningRuleResponseFields alternative Modified
- actions property Modified
-
NewTermsRuleResponseFields alternative Modified
- actions property Modified
-
EsqlRuleResponseFields alternative Modified
- actions property Modified
-
EqlRuleResponseFields alternative Modified
-
application/json content type Modified
PUT /api/detection_engine/rules/_bulk_update
- Body
-
application/json content type Modified
-
EqlRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
QueryRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
SavedQueryRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
ThresholdRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
ThreatMatchRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
MachineLearningRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
NewTermsRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
EsqlRuleCreateFields alternative Modified
-
actions property Modified
- alerts_filter property Modified
-
actions property Modified
-
EqlRuleCreateFields alternative Modified
- Response
-
200 response Modified
-
application/json content type Modified
-
EqlRuleResponseFields alternative Modified
- actions property Modified
-
QueryRuleResponseFields alternative Modified
- actions property Modified
-
SavedQueryRuleResponseFields alternative Modified
- actions property Modified
-
ThresholdRuleResponseFields alternative Modified
- actions property Modified
-
ThreatMatchRuleResponseFields alternative Modified
- actions property Modified
-
MachineLearningRuleResponseFields alternative Modified
- actions property Modified
-
NewTermsRuleResponseFields alternative Modified
- actions property Modified
-
EsqlRuleResponseFields alternative Modified
- actions property Modified
-
EqlRuleResponseFields alternative Modified
-
application/json content type Modified