Tools

Search Cases

Search and list Kibana cases for incident tracking. Cases can be associated with alerts, have comments and attachments, and can be synced with external case management systems.

List Connectors

List all connectors configured in Kibana. Connectors integrate with external services like email, Slack, PagerDuty, webhook, Jira, ServiceNow, Microsoft Teams, and more.

List Roles

List all security roles configured in Kibana. Roles define Elasticsearch and Kibana feature privileges.

Export Saved Objects

Export Kibana saved objects in NDJSON format for backup or migration between environments. Specify either object types to export all objects of those types, or provide specific object IDs to export selectively.

List Data Views

List all data views (index patterns) configured in Kibana. Data views define which Elasticsearch indices Kibana queries.

Manage Agent Policy

Create, get, update, or delete a Fleet agent policy. Agent policies define agent behavior, integrations, and monitoring configuration.

Execute Connector

Test or execute a Kibana connector with specific parameters. Useful for testing connector configuration or sending one-off notifications.

Get Kibana Status

Get the current status of the Kibana instance, including overall health, version, and plugin status.

Add Case Comment

Add a comment or alert attachment to an existing Kibana case.

Get Enrollment Tokens

Get Fleet enrollment API keys used to enroll new Elastic Agents.

Manage Case

Create, get, update, or delete a Kibana case. Cases are used for incident tracking and can be associated with alerts and synced with external case management systems.

Manage Data View

Create, get, update, or delete a Kibana data view (index pattern). Data views define which Elasticsearch indices Kibana queries. Supports configuring runtime fields, time fields, field formats, and source filters.

Manage Connector

Create, get, update, or delete a Kibana connector. Connectors integrate with external services for rule-triggered notifications. Supported types include email, Slack, PagerDuty, webhook, Jira, ServiceNow, Microsoft Teams, Opsgenie, and more.

Manage Saved Object

Get, create, update, or delete a Kibana saved object. Supports dashboards, visualizations, maps, data views, Canvas workpads, and other saved object types. Provide the action to perform along with the object type and ID.

List Spaces

List all Kibana spaces. Spaces organize dashboards and other saved objects into meaningful categories.

Manage Slo

Create, get, update, or delete a Kibana Service Level Objective (SLO). Supports KQL, metric custom, and histogram indicator types with occurrences or timeslices budgeting methods.

Search Alerting Rules

Search and list Kibana alerting rules. Rules monitor conditions and trigger actions when thresholds are met. Supports filtering by search terms and KQL filters.

List Agent Policies

List Fleet agent policies in Kibana. Agent policies define what data agents collect and which integrations they run.

List Fleet Agents

List Elastic Agents managed by Fleet. Shows agent status, policy assignment, version, and host information.

Manage Role

Create, get, update, or delete a Kibana security role. Roles define Elasticsearch cluster/index privileges and Kibana feature privileges per space.

Search Saved Objects

Search and list Kibana saved objects such as dashboards, visualizations, maps, data views, Canvas workpads, and other saved objects. Use this to find specific objects by type and search term, or to browse all objects of a given type.

Manage Space

Create, get, update, or delete a Kibana space. Spaces enable organizing dashboards and other saved objects into meaningful categories. Rules and connectors are isolated to the space in which they were created.

Manage Alerting Rule

Create, get, update, delete, enable, disable, or mute/unmute a Kibana alerting rule. Rules monitor conditions and trigger actions via connectors when thresholds are met. Supports Elasticsearch query, index threshold, metric threshold, log threshold, and more.

Search Slos

Search and list Kibana Service Level Objectives (SLOs). SLOs define reliability targets for services and can use various indicator types.

List Package Policies

List Fleet package policies in Kibana. Package policies attach Elastic integrations, such as Nginx or System, to Fleet agent policies.

Manage Default Data View

Get, set, or unset the default Kibana data view for the current space. The default data view is used when no specific data view is selected.

List Rule Types

List Kibana alerting rule types available to the authenticated user. Use this before creating rules to discover ruleTypeId values, action groups, required license level, and authorized consumers.

List Connector Types

List Kibana connector types available for rules and cases, including license and feature availability. Use this before creating connectors to discover connectorTypeId values and supported features.

Manage Rule Snooze

Schedule or delete a Kibana alerting rule snooze schedule. Snooze schedules temporarily suppress rule notifications during maintenance windows or planned downtime.

Manage Package Policy

Get, create, update, or delete a Fleet package policy. Package policies attach Elastic integration packages to Fleet agent policies. Provide packagePolicy as the raw Kibana package policy request body for create and update.