Need help with your APIs? I offer API discovery, governance & evangelism services. Explore services →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Kibana alerting API

Alerting enables you to define rules, which detect complex conditions within your data. When a condition is met, the rule tracks it as an alert and runs the actions that are defined in the rule. Actions typically involve the use of connectors to interact with Kibana services or third party integrations.

Kibana alerting API is one of 60 APIs that Kibana publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include alerting. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and authentication docs.

This API exposes 20 operations across 16 paths, and defines 37 schemas. It is described by OpenAPI 3.0.3.

Requests are made against a single base URL, https://{kibana_url}.

20 operations 16 paths 37 schemas 3 DELETE5 GET11 POST1 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.0.3
Base URL
https://localhost:5601/api
Authentication
API Key, HTTP Basic
Contact
Kibana Team
Resource Areas
1

Authentication & Security 2

Kibana alerting API declares 2 security schemes for authenticating requests. An API key is passed in the header as Authorization (apiKeyAuth). It accepts HTTP basic authentication (basicAuth). By default, every request must be authenticated.

  • apiKeyAuth — These APIs use key-based authentication. You must create an API key and use the encoded value in the request header. For example: Authorization: ApiKey base64A…

Paths & Operations 20

Across 16 paths, the API surfaces 20 operations — 3 DELETE, 5 GET, 11 POST, 1 PUT. Each is listed below with its method, path, parameters, and response codes.

alerting 20

Alerting enables you to define rules, which detect complex conditions within your data. When a condition is met, the rule tracks it as an alert and runs the actions that are defin…

GET
/api/alerting/_health
Get the alerting framework health
getAlertingHealth → 200401
GET
/api/alerting/rule_types
Get the rule types
getRuleTypes → 200401
DELETE
/api/alerting/rule/{id}
Delete a rule
delete-alerting-rule-id 2 params → 204400403404
GET
/api/alerting/rule/{id}
Get rule details
get-alerting-rule-id 1 param → 200400403404
POST
/api/alerting/rule/{id}
Create a rule
post-alerting-rule-id 2 params body → 200400403409
PUT
/api/alerting/rule/{id}
Update a rule
put-alerting-rule-id 2 params body → 200400403404409
POST
/api/alerting/rule/{id}/_disable
Disable a rule
post-alerting-rule-id-disable 2 params body → 204400403404
POST
/api/alerting/rule/{id}/_enable
Enable a rule
post-alerting-rule-id-enable 2 params → 204400403404
POST
/api/alerting/rule/{id}/_mute_all
Mute all alerts
post-alerting-rule-id-mute-all 2 params → 204400403404
POST
/api/alerting/rule/{id}/_unmute_all
Unmute all alerts
post-alerting-rule-id-unmute-all 2 params → 204400403404
POST
/api/alerting/rule/{id}/_update_api_key
Update the API key for a rule
post-alerting-rule-id-update-api-key 2 params → 204400403404409
POST
/api/alerting/rule/{id}/snooze_schedule
Schedule a snooze for the rule
post-alerting-rule-id-snooze-schedule 2 params body → 200400403404
POST
/api/alerting/rule/{rule_id}/alert/{alert_id}/_mute
Mute an alert
post-alerting-rule-rule-id-alert-alert-id-mute 4 params → 204400403404
POST
/api/alerting/rule/{rule_id}/alert/{alert_id}/_unmute
Unmute an alert
post-alerting-rule-rule-id-alert-alert-id-unmute 3 params → 204400403404
DELETE
/api/alerting/rule/{ruleId}/snooze_schedule/{scheduleId}
Delete a snooze schedule for a rule
delete-alerting-rule-ruleid-snooze-schedule-scheduleid 3 params → 204400403404
GET
/api/alerting/rules/_find
Get information about rules
get-alerting-rules-find 11 params → 200400403
POST
/api/alerting/rules/backfill/_find
Find backfills for rules
post-alerting-rules-backfill-find 9 params → 200400403
POST
/api/alerting/rules/backfill/_schedule
Schedule a backfill for rules
post-alerting-rules-backfill-schedule 1 param body → 200400403404
DELETE
/api/alerting/rules/backfill/{id}
Delete a backfill by ID
delete-alerting-rules-backfill-id 2 params → 204400403404
GET
/api/alerting/rules/backfill/{id}
Get a backfill by ID
get-alerting-rules-backfill-id 1 param → 200400403404

Schemas 37

The contract defines 37 schemas that model the data the API accepts and returns. The most detailed are Kibana_HTTP_APIs_xpack-synthetics-alerts-tls-create-rule-body-alerting (13 properties), Kibana_HTTP_APIs_index-threshold-create-rule-body-alerting (13 properties), Kibana_HTTP_APIs_observability-rules-custom-threshold-create-rule-body-alerting (13 properties), Kibana_HTTP_APIs_monitoring-alert-cpu-usage-create-rule-body-alerting (13 properties). Each schema is shown below with its type and property counts.

Kibana_HTTP_APIs_observability-rules-custom-threshold-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_xpack-synthetics-alerts-tls-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_geo-containment-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_es-query-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_xpack-uptime-alerts-monitorstatus-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_datasetquality-degradeddocs-create-rule-body-alerting
object
13 properties 5 required
Alerting_fieldmap_properties
object
10 properties
Kibana_HTTP_APIs_monitoring-alert-cluster-health-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_xpack-uptime-alerts-durationanomaly-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_monitoring-alert-logstash-version-mismatch-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_monitoring-alert-missing-monitoring-data-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_metrics-alert-threshold-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_monitoring-alert-nodes-changed-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_monitoring-shard-size-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_xpack-ml-anomaly-detection-alert-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_slo-rules-burnrate-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_apm-transaction-error-rate-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_logs-alert-document-count-create-rule-body-alerting
object
13 properties 5 required
Alerting_401_response
object
3 properties
Kibana_HTTP_APIs_xpack-ml-anomaly-detection-jobs-health-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_metrics-alert-inventory-threshold-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_monitoring-alert-disk-usage-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_apm-error-rate-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_monitoring-alert-kibana-version-mismatch-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_monitoring-alert-jvm-memory-usage-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_monitoring-alert-elasticsearch-version-mismatch-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_apm-anomaly-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_xpack-uptime-alerts-tlscertificate-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_apm-transaction-duration-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_monitoring-ccr-read-exceptions-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_monitoring-alert-thread-pool-write-rejections-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_monitoring-alert-license-expiration-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_transform-health-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_xpack-synthetics-alerts-monitorstatus-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_monitoring-alert-thread-pool-search-rejections-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_monitoring-alert-cpu-usage-create-rule-body-alerting
object
13 properties 5 required
Kibana_HTTP_APIs_index-threshold-create-rule-body-alerting
object
13 properties 5 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

kibana-alerting-api-openapi.yml Raw ↑

Other APIs Kibana publishes across the network.

Kibana Actions API
Kibana agent builder API
Kibana APM agent configuration API
Kibana APM agent keys API
Kibana APM annotations API
Kibana APM server schema API
Kibana APM sourcemaps API
Kibana cases API
Kibana connectors API
Kibana Data streams API
Kibana data views API
Kibana Elastic Agent actions API