Tools

Export Saved Objects

Export Kibana saved objects in NDJSON format for backup or migration between environments. Specify either object types to export all objects of those types, or provide specific object IDs to export selectively.

List Connectors

List all connectors configured in Kibana. Connectors integrate with external services like email, Slack, PagerDuty, webhook, Jira, ServiceNow, Microsoft Teams, and more.

Get Enrollment Tokens

Get Fleet enrollment API keys used to enroll new Elastic Agents.

Get Kibana Status

Get the current status of the Kibana instance, including overall health, version, and plugin status.

Manage Space

Create, get, update, or delete a Kibana space. Spaces enable organizing dashboards and other saved objects into meaningful categories. Rules and connectors are isolated to the space in which they were created.

Search Slos

Search and list Kibana Service Level Objectives (SLOs). SLOs define reliability targets for services and can use various indicator types.

List Agent Policies

List Fleet agent policies in Kibana. Agent policies define what data agents collect and which integrations they run.

Manage Case

Create, get, update, or delete a Kibana case. Cases are used for incident tracking and can be associated with alerts and synced with external case management systems.

Search Saved Objects

Search and list Kibana saved objects such as dashboards, visualizations, maps, data views, Canvas workpads, and other saved objects. Use this to find specific objects by type and search term, or to browse all objects of a given type.

Search Alerting Rules

Search and list Kibana alerting rules. Rules monitor conditions and trigger actions when thresholds are met. Supports filtering by search terms and KQL filters.

Manage Package Policy

Get, create, update, or delete a Fleet package policy. Package policies attach Elastic integration packages to Fleet agent policies. Provide packagePolicy as the raw Kibana package policy request body for create and update.

Manage Role

Create, get, update, or delete a Kibana security role. Roles define Elasticsearch cluster/index privileges and Kibana feature privileges per space.

List Roles

List all security roles configured in Kibana. Roles define Elasticsearch and Kibana feature privileges.

Manage Slo

Create, get, update, or delete a Kibana Service Level Objective (SLO). Supports KQL, metric custom, and histogram indicator types with occurrences or timeslices budgeting methods.

List Spaces

List all Kibana spaces. Spaces organize dashboards and other saved objects into meaningful categories.

List Fleet Agents

List Elastic Agents managed by Fleet. Shows agent status, policy assignment, version, and host information.

Manage Connector

Create, get, update, or delete a Kibana connector. Connectors integrate with external services for rule-triggered notifications. Supported types include email, Slack, PagerDuty, webhook, Jira, ServiceNow, Microsoft Teams, Opsgenie, and more.

Manage Rule Snooze

Schedule or delete a Kibana alerting rule snooze schedule. Snooze schedules temporarily suppress rule notifications during maintenance windows or planned downtime.

List Package Policies

List Fleet package policies in Kibana. Package policies attach Elastic integrations, such as Nginx or System, to Fleet agent policies.

Execute Connector

Test or execute a Kibana connector with specific parameters. Useful for testing connector configuration or sending one-off notifications.

List Connector Types

List Kibana connector types available for rules and cases, including license and feature availability. Use this before creating connectors to discover connectorTypeId values and supported features.

Manage Agent Policy

Create, get, update, or delete a Fleet agent policy. Agent policies define agent behavior, integrations, and monitoring configuration.

Add Case Comment

Add a comment or alert attachment to an existing Kibana case.

List Rule Types

List Kibana alerting rule types available to the authenticated user. Use this before creating rules to discover ruleTypeId values, action groups, required license level, and authorized consumers.

Manage Alerting Rule

Create, get, update, delete, enable, disable, or mute/unmute a Kibana alerting rule. Rules monitor conditions and trigger actions via connectors when thresholds are met. Supports Elasticsearch query, index threshold, metric threshold, log threshold, and more.

Manage Saved Object

Get, create, update, or delete a Kibana saved object. Supports dashboards, visualizations, maps, data views, Canvas workpads, and other saved object types. Provide the action to perform along with the object type and ID.

List Data Views

List all data views (index patterns) configured in Kibana. Data views define which Elasticsearch indices Kibana queries.

Manage Data View

Create, get, update, or delete a Kibana data view (index pattern). Data views define which Elasticsearch indices Kibana queries. Supports configuring runtime fields, time fields, field formats, and source filters.

Search Cases

Search and list Kibana cases for incident tracking. Cases can be associated with alerts, have comments and attachments, and can be synced with external case management systems.

Manage Default Data View

Get, set, or unset the default Kibana data view for the current space. The default data view is used when no specific data view is selected.