Kibana integration

Delete Alerting Rule

Tool to delete an alerting rule in Kibana. Use when you need to remove a specific alerting rule by its ID.

Delete Connector

Tool to delete a connector in Kibana. Use when you need to remove an existing connector.

Delete Fleet Output

Tool to delete a specific output configuration in Kibana Fleet. Use when you need to remove an existing output by its ID.

Delete Fleet Proxy

Deletes a Fleet proxy configuration by its unique identifier. Fleet proxies enable agents to communicate through proxy servers. Use this action to remove proxy configurations that are no longer needed. The proxy must not be in use by any agent policies or outputs before deletion. Requires 'fleet-se…

Delete List

Deletes a list. Use when you want to delete a list by its ID.

Delete Osquery Saved Query

Delete a saved Osquery query by its saved object ID. Use this to remove a specific Osquery saved query from Kibana. IMPORTANT: This action requires the 'saved_object_id' (UUID format), not the custom 'id' field. You can obtain the saved_object_id by listing queries first or from the response when c…

Delete Saved Object

Tool to delete a saved object in Kibana. Use when you need to remove a specific saved object like a visualization or dashboard.

Find Kibana Alerts

Tool to find and/or aggregate detection alerts in Kibana. Use this to retrieve a list of alerts, optionally filtering them with a query and performing aggregations.

Get Action Types

Retrieves all available connector types (actions) in Kibana. Connector types (also called action types) are integrations like Slack, Email, Webhook, ServiceNow, etc. that can be used with alerting rules, cases, and workflows. Use this to discover which connector types are available and their requir…

Get Alerting Rules

Tool to retrieve a list of alerting rules in Kibana. Use when you need to get a paginated set of rules based on specified conditions.

Get Rule Types

Retrieves available rule types (alert types) in Kibana. Returns comprehensive metadata about each rule type including: - Available action groups and variables for action templates - License requirements and authorization details - Category (management, observability, securitySolution) - Configurati…

Get Cases

Tool to retrieve a list of cases in Kibana. Use when you need to find or list existing security or operational cases, potentially filtering by various attributes like status, assignee, or severity.