API tools

Security Analytics includes a number of APIs to help administrators maintain and update an implementation. The APIs often mimic the same controls available for setting up Security Analytics in OpenSearch Dashboards, and they provide another option for administering the plugin.

The APIs for Security Analytics are separated into the following categories:

• Detector APIs
• Rules APIs
• Mappings APIs
• Alerts and findings APIs
• Correlation engine APIs
• Log type APIs