entity-store - Security Solution Entity Store
Aggregates entity-centric security data into a single shared index
Tags
Updated: 2026-05-28Capabilities
Typical Inputs
Typical Outputs
What this skill does
- run ESQL queries
- create entities
- update entities
- delete entities
- bulk update entities
- link entities
- unlink entities
- group entities
- install entity store
- start extraction
- stop extraction
- check privileges
- register maintainers
- start maintainer
- run maintainer
- stop maintainer
Inputs
- API route parameters
- EUID construction parameters
- source indices
- namespace
- entity type
- entity ID
- maintainer ID
- resolution parameters
- CRUD operation parameters
- query filters
- privilege check parameters
Outputs
- HTTP responses from API routes
- indexed data in .entities.v2.latest.security_{namespace}
- installation status
- extraction status
- entity CRUD results
- resolution operation results
- maintainer status
- privilege check results
- error messages
Requirements
- Kibana 9.4.0+
- Elasticsearch with ESQL support
- entityStore plugin
- securitySolution plugin
- appropriate license tier