From 098708ae5023ef5a19f1742b4b381566eaf92335 Mon Sep 17 00:00:00 2001 From: mmahacek Date: Tue, 9 Sep 2025 12:06:38 -0700 Subject: [PATCH 1/7] Update Kibana v9 REST endpoints --- src/main/resources/kibana-rest.yml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/src/main/resources/kibana-rest.yml b/src/main/resources/kibana-rest.yml index 993b4220..0e934546 100644 --- a/src/main/resources/kibana-rest.yml +++ b/src/main/resources/kibana-rest.yml @@ -22,6 +22,7 @@ kibana_actions: versions: ">= 7.0.0": "/api/actions" + ">= 9.0.0": "/api/actions/connectors" kibana_alerts: versions: @@ -29,6 +30,10 @@ kibana_alerts: url: "/api/alerts/_find" spaceaware: true paginate: per_page + ">= 9.0.0": + url: "/api/alerting/rules/_find" + spaceaware: true + paginate: per_page kibana_alerts_health: versions: @@ -45,6 +50,7 @@ kibana_data_views: kibana_detection_engine_health_cluster: versions: ">= 8.8.2": "/internal/detection_engine/health/_cluster" + ">= 9.0.0": "" # Calculates health of Detection Engine and returns a health snapshot. # Scope: all detection rules in the current/default Kibana space. @@ -52,6 +58,7 @@ kibana_detection_engine_health_cluster: kibana_detection_engine_health_space: versions: ">= 8.8.2": "/internal/detection_engine/health/_space" + ">= 9.0.0": "" kibana_detection_engine_privileges: versions: @@ -72,6 +79,7 @@ kibana_detection_engine_rules_prebuilt_status: ">= 7.10.0 < 7.15.0": "/api/detection_engine/prepackaged" ">= 7.15.0 < 8.9.0": "/api/detection_engine/rules/prepackaged/_status" ">= 8.9.0": "/internal/detection_engine/prebuilt_rules/status" + ">= 9.0.0": "" kibana_fleet_agents: versions: @@ -88,6 +96,7 @@ kibana_fleet_agent_policies: kibana_fleet_packages: versions: ">= 7.11.0": "/api/fleet/epm/packages?experimental=true" + ">= 9.0.0": "/api/fleet/epm/packages?withPackagePoliciesCount=true" kibana_fleet_agent_status: versions: @@ -109,6 +118,7 @@ kibana_fleet_settings: kibana_reporting_diagnose_browser: versions: ">= 8.16.0": "/internal/reporting/diagnose/browser" + ">= 9.0.0": "" kibana_roles: versions: @@ -155,6 +165,7 @@ kibana_security_exception_list: kibana_security_packages: versions: ">= 7.10.0": "/api/fleet/epm/packages?experimental=true&category=security" + ">= 9.0.0": "/api/fleet/epm/packages?withPackagePoliciesCount=true&category=security" kibana_settings: versions: @@ -180,6 +191,7 @@ kibana_status: kibana_synthetics_monitor_filters: versions: ">= 8.12.0": "/internal/synthetics/monitor/filters" + ">= 9.0.0": "" # Disabled pending review #kibana_synthetics_monitors: @@ -208,7 +220,9 @@ kibana_user: versions: ">= 7.6.0": "/internal/security/me" ">= 5.0.0 < 7.6.0": "/api/security/v1/me" + ">= 9.0.0": "" kibana_stack_monitoring_health: versions: ">= 8.3.1": "/api/monitoring/v1/_health" + ">= 9.0.0": "" From 4d9d263c24b30fd072b6cb38542f56d22a999f1f Mon Sep 17 00:00:00 2001 From: mmahacek Date: Tue, 9 Sep 2025 13:17:01 -0700 Subject: [PATCH 2/7] Notate Kibana REST calls that are blocked on v9 --- src/main/resources/kibana-rest.yml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/src/main/resources/kibana-rest.yml b/src/main/resources/kibana-rest.yml index 0e934546..71cfc3a8 100644 --- a/src/main/resources/kibana-rest.yml +++ b/src/main/resources/kibana-rest.yml @@ -50,7 +50,7 @@ kibana_data_views: kibana_detection_engine_health_cluster: versions: ">= 8.8.2": "/internal/detection_engine/health/_cluster" - ">= 9.0.0": "" + # ">= 9.0.0": "uri [/internal/detection_engine/health/_cluster] with method [get] exists but is not available with the current configuration" # Calculates health of Detection Engine and returns a health snapshot. # Scope: all detection rules in the current/default Kibana space. @@ -58,7 +58,7 @@ kibana_detection_engine_health_cluster: kibana_detection_engine_health_space: versions: ">= 8.8.2": "/internal/detection_engine/health/_space" - ">= 9.0.0": "" + # ">= 9.0.0": "uri [/internal/detection_engine/health/_space] with method [get] exists but is not available with the current configuration" kibana_detection_engine_privileges: versions: @@ -79,7 +79,7 @@ kibana_detection_engine_rules_prebuilt_status: ">= 7.10.0 < 7.15.0": "/api/detection_engine/prepackaged" ">= 7.15.0 < 8.9.0": "/api/detection_engine/rules/prepackaged/_status" ">= 8.9.0": "/internal/detection_engine/prebuilt_rules/status" - ">= 9.0.0": "" + # ">= 9.0.0": "uri [/internal/detection_engine/prebuilt_rules/status] with method [get] exists but is not available with the current configuration" kibana_fleet_agents: versions: @@ -118,7 +118,7 @@ kibana_fleet_settings: kibana_reporting_diagnose_browser: versions: ">= 8.16.0": "/internal/reporting/diagnose/browser" - ">= 9.0.0": "" + # ">= 9.0.0": "uri [/internal/reporting/diagnose/browser] with method [get] exists but is not available with the current configuration" kibana_roles: versions: @@ -191,7 +191,7 @@ kibana_status: kibana_synthetics_monitor_filters: versions: ">= 8.12.0": "/internal/synthetics/monitor/filters" - ">= 9.0.0": "" + # ">= 9.0.0": "uri [/internal/synthetics/monitor/filters] with method [get] exists but is not available with the current configuration" # Disabled pending review #kibana_synthetics_monitors: @@ -220,9 +220,9 @@ kibana_user: versions: ">= 7.6.0": "/internal/security/me" ">= 5.0.0 < 7.6.0": "/api/security/v1/me" - ">= 9.0.0": "" + # ">= 9.0.0": "uri [/internal/security/me] with method [get] exists but is not available with the current configuration" kibana_stack_monitoring_health: versions: ">= 8.3.1": "/api/monitoring/v1/_health" - ">= 9.0.0": "" + # ">= 9.0.0": "uri [/api/monitoring/v1/_health] with method [get] exists but is not available with the current configuration" From e2fe64ceb88f1eafaadc91a1acfcb69f885326c6 Mon Sep 17 00:00:00 2001 From: mmahacek Date: Tue, 9 Sep 2025 13:23:59 -0700 Subject: [PATCH 3/7] Fix version check for v8 deprecated endpoints --- src/main/resources/kibana-rest.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/src/main/resources/kibana-rest.yml b/src/main/resources/kibana-rest.yml index 71cfc3a8..a368f501 100644 --- a/src/main/resources/kibana-rest.yml +++ b/src/main/resources/kibana-rest.yml @@ -21,12 +21,12 @@ kibana_actions: versions: - ">= 7.0.0": "/api/actions" + ">= 7.0.0 < 9.0.0": "/api/actions" ">= 9.0.0": "/api/actions/connectors" kibana_alerts: versions: - ">= 7.9.0": + ">= 7.9.0 < 9.0.0": url: "/api/alerts/_find" spaceaware: true paginate: per_page @@ -95,7 +95,7 @@ kibana_fleet_agent_policies: kibana_fleet_packages: versions: - ">= 7.11.0": "/api/fleet/epm/packages?experimental=true" + ">= 7.11.0 < 9.0.0": "/api/fleet/epm/packages?experimental=true" ">= 9.0.0": "/api/fleet/epm/packages?withPackagePoliciesCount=true" kibana_fleet_agent_status: @@ -164,7 +164,7 @@ kibana_security_exception_list: kibana_security_packages: versions: - ">= 7.10.0": "/api/fleet/epm/packages?experimental=true&category=security" + ">= 7.10.0 < 9.0.0": "/api/fleet/epm/packages?experimental=true&category=security" ">= 9.0.0": "/api/fleet/epm/packages?withPackagePoliciesCount=true&category=security" kibana_settings: From c335dca494469b57683e19fee66cde2e12b93fb6 Mon Sep 17 00:00:00 2001 From: mmahacek Date: Tue, 9 Sep 2025 13:42:18 -0700 Subject: [PATCH 4/7] Clear Kibana-rest comments for protected v9 endpoints --- src/main/resources/kibana-rest.yml | 7 ------- 1 file changed, 7 deletions(-) diff --git a/src/main/resources/kibana-rest.yml b/src/main/resources/kibana-rest.yml index a368f501..1616b3b0 100644 --- a/src/main/resources/kibana-rest.yml +++ b/src/main/resources/kibana-rest.yml @@ -50,7 +50,6 @@ kibana_data_views: kibana_detection_engine_health_cluster: versions: ">= 8.8.2": "/internal/detection_engine/health/_cluster" - # ">= 9.0.0": "uri [/internal/detection_engine/health/_cluster] with method [get] exists but is not available with the current configuration" # Calculates health of Detection Engine and returns a health snapshot. # Scope: all detection rules in the current/default Kibana space. @@ -58,7 +57,6 @@ kibana_detection_engine_health_cluster: kibana_detection_engine_health_space: versions: ">= 8.8.2": "/internal/detection_engine/health/_space" - # ">= 9.0.0": "uri [/internal/detection_engine/health/_space] with method [get] exists but is not available with the current configuration" kibana_detection_engine_privileges: versions: @@ -79,7 +77,6 @@ kibana_detection_engine_rules_prebuilt_status: ">= 7.10.0 < 7.15.0": "/api/detection_engine/prepackaged" ">= 7.15.0 < 8.9.0": "/api/detection_engine/rules/prepackaged/_status" ">= 8.9.0": "/internal/detection_engine/prebuilt_rules/status" - # ">= 9.0.0": "uri [/internal/detection_engine/prebuilt_rules/status] with method [get] exists but is not available with the current configuration" kibana_fleet_agents: versions: @@ -118,7 +115,6 @@ kibana_fleet_settings: kibana_reporting_diagnose_browser: versions: ">= 8.16.0": "/internal/reporting/diagnose/browser" - # ">= 9.0.0": "uri [/internal/reporting/diagnose/browser] with method [get] exists but is not available with the current configuration" kibana_roles: versions: @@ -191,7 +187,6 @@ kibana_status: kibana_synthetics_monitor_filters: versions: ">= 8.12.0": "/internal/synthetics/monitor/filters" - # ">= 9.0.0": "uri [/internal/synthetics/monitor/filters] with method [get] exists but is not available with the current configuration" # Disabled pending review #kibana_synthetics_monitors: @@ -220,9 +215,7 @@ kibana_user: versions: ">= 7.6.0": "/internal/security/me" ">= 5.0.0 < 7.6.0": "/api/security/v1/me" - # ">= 9.0.0": "uri [/internal/security/me] with method [get] exists but is not available with the current configuration" kibana_stack_monitoring_health: versions: ">= 8.3.1": "/api/monitoring/v1/_health" - # ">= 9.0.0": "uri [/api/monitoring/v1/_health] with method [get] exists but is not available with the current configuration" From c1d6797d19c9d955cd120773c8f1279646da7f1a Mon Sep 17 00:00:00 2001 From: mmahacek Date: Mon, 23 Mar 2026 16:49:52 -0700 Subject: [PATCH 5/7] Enable space awareness for multiple Kibana APIs Added 'spaceaware: true' to various Kibana API endpoints for versioning. --- src/main/resources/kibana-rest.yml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/src/main/resources/kibana-rest.yml b/src/main/resources/kibana-rest.yml index b361d74a..87e9ae8d 100644 --- a/src/main/resources/kibana-rest.yml +++ b/src/main/resources/kibana-rest.yml @@ -43,6 +43,7 @@ kibana_alerts_health: versions: ">= 7.11.0 < 7.13.0": "/api/alerts/_health" ">= 7.13.0": "/api/alerting/_health" + spaceaware: true kibana_data_views: versions: @@ -89,26 +90,31 @@ kibana_fleet_agents: ">= 7.10.0": url: "/api/fleet/agents" paginate: perPage + spaceaware: true kibana_fleet_agent_policies: versions: ">= 7.10.0": url: "/api/fleet/agent_policies" paginate: perPage + spaceaware: true kibana_fleet_packages: versions: ">= 7.11.0 < 9.0.0": "/api/fleet/epm/packages?experimental=true" ">= 9.0.0": "/api/fleet/epm/packages?withPackagePoliciesCount=true" + spaceaware: true kibana_fleet_agent_status: versions: ">= 7.11.0 < 8.0.0": "/api/fleet/agent-status" ">= 8.0.0": "/api/fleet/agent_status" + spaceaware: true kibana_fleet_agents_current_upgrades: versions: ">= 8.3.0": "/api/fleet/agents/current_upgrades" + spaceaware: true kibana_lists_privileges: versions: @@ -117,6 +123,7 @@ kibana_lists_privileges: kibana_fleet_settings: versions: ">= 7.14.0": "/api/fleet/settings" + spaceaware: true kibana_reporting_diagnose_browser: versions: @@ -132,24 +139,28 @@ kibana_security_endpoint_host_isolation: ">= 7.14.0": url: "/api/exception_lists/items/_find?list_id=endpoint_host_isolation_exceptions&namespace_type=agnostic" paginate: per_page + spaceaware: true kibana_security_endpoint_event_filters: versions: ">= 7.14.0": url: "/api/exception_lists/items/_find?list_id=endpoint_event_filters&namespace_type=agnostic" paginate: per_page + spaceaware: true kibana_security_endpoint_exception_items: versions: ">= 7.14.0": url: "/api/exception_lists/items/_find?list_id=endpoint_list&namespace_type=agnostic" paginate: per_page + spaceaware: true kibana_security_endpoint_metadata: versions: ">= 8.0.0": url: "/api/endpoint/metadata" paginate: pageSize + spaceaware: true kibana_security_endpoint_trusted_apps: versions: @@ -157,17 +168,20 @@ kibana_security_endpoint_trusted_apps: ">= 7.14.0": url: "/api/exception_lists/items/_find?list_id=endpoint_trusted_apps&namespace_type=agnostic" paginate: per_page + spaceaware: true kibana_security_exception_list: versions: ">= 7.10.0": url: "/api/exception_lists/_find?namespace_type=agnostic" paginate: per_page + spaceaware: true kibana_security_packages: versions: ">= 7.10.0 < 9.0.0": "/api/fleet/epm/packages?experimental=true&category=security" ">= 9.0.0": "/api/fleet/epm/packages?withPackagePoliciesCount=true&category=security" + spaceaware: true kibana_settings: versions: From 7e69013f5ca6c1205e86480b708d629e94422d3d Mon Sep 17 00:00:00 2001 From: mmahacek Date: Tue, 28 Apr 2026 09:19:37 -0700 Subject: [PATCH 6/7] kibana-rest.yml: fix yaml formatting --- src/main/resources/kibana-rest.yml | 34 +++++++++++++++++++++--------- 1 file changed, 24 insertions(+), 10 deletions(-) diff --git a/src/main/resources/kibana-rest.yml b/src/main/resources/kibana-rest.yml index 87e9ae8d..133b1670 100644 --- a/src/main/resources/kibana-rest.yml +++ b/src/main/resources/kibana-rest.yml @@ -41,8 +41,11 @@ kibana_alerts: kibana_alerts_health: versions: - ">= 7.11.0 < 7.13.0": "/api/alerts/_health" - ">= 7.13.0": "/api/alerting/_health" + ">= 7.11.0 < 7.13.0": + url: "/api/alerts/_health" + spaceaware: true + ">= 7.13.0": + url: "/api/alerting/_health" spaceaware: true kibana_data_views: @@ -101,19 +104,26 @@ kibana_fleet_agent_policies: kibana_fleet_packages: versions: - ">= 7.11.0 < 9.0.0": "/api/fleet/epm/packages?experimental=true" - ">= 9.0.0": "/api/fleet/epm/packages?withPackagePoliciesCount=true" + ">= 7.11.0 < 9.0.0": + url: "/api/fleet/epm/packages?experimental=true" + spaceaware: true + ">= 9.0.0": + url: "/api/fleet/epm/packages?withPackagePoliciesCount=true" spaceaware: true kibana_fleet_agent_status: versions: - ">= 7.11.0 < 8.0.0": "/api/fleet/agent-status" - ">= 8.0.0": "/api/fleet/agent_status" + ">= 7.11.0 < 8.0.0": + url: "/api/fleet/agent-status" + spaceaware: true + ">= 8.0.0": + url: "/api/fleet/agent_status" spaceaware: true kibana_fleet_agents_current_upgrades: versions: - ">= 8.3.0": "/api/fleet/agents/current_upgrades" + ">= 8.3.0": + url: "/api/fleet/agents/current_upgrades" spaceaware: true kibana_lists_privileges: @@ -122,7 +132,8 @@ kibana_lists_privileges: kibana_fleet_settings: versions: - ">= 7.14.0": "/api/fleet/settings" + ">= 7.14.0": + url: "/api/fleet/settings" spaceaware: true kibana_reporting_diagnose_browser: @@ -179,8 +190,11 @@ kibana_security_exception_list: kibana_security_packages: versions: - ">= 7.10.0 < 9.0.0": "/api/fleet/epm/packages?experimental=true&category=security" - ">= 9.0.0": "/api/fleet/epm/packages?withPackagePoliciesCount=true&category=security" + ">= 7.10.0 < 9.0.0": + url: "/api/fleet/epm/packages?experimental=true&category=security" + spaceaware: true + ">= 9.0.0": + url: "/api/fleet/epm/packages?withPackagePoliciesCount=true&category=security" spaceaware: true kibana_settings: From 7729e0ade1058574becfb52c43f1c28abb7b420f Mon Sep 17 00:00:00 2001 From: mmahacek Date: Tue, 28 Apr 2026 09:22:49 -0700 Subject: [PATCH 7/7] Update kibana-rest.yml for additional space-aware endpoints --- src/main/resources/kibana-rest.yml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/src/main/resources/kibana-rest.yml b/src/main/resources/kibana-rest.yml index 133b1670..19f1cdea 100644 --- a/src/main/resources/kibana-rest.yml +++ b/src/main/resources/kibana-rest.yml @@ -231,7 +231,9 @@ kibana_synthetics_monitor_filters: kibana_synthetics_private_locations: versions: - ">= 8.12.0": "/api/synthetics/private_locations" + ">= 8.12.0": + url: "/api/synthetics/private_locations" + spaceaware: true kibana_task_manager_health: versions: @@ -247,7 +249,9 @@ kibana_uptime_locations: kibana_uptime_settings: versions: - ">= 8.12.0": "/api/uptime/settings" + ">= 8.12.0": + url: "/api/uptime/settings" + spaceaware: true kibana_user: versions: