Update a monitored user

PUT /api/entity_analytics/monitoring/users/{id}

Api key auth

Path parameters

id string Required

application/json

Body Required

@timestamp string(date-time)
entity_analytics_monitoring object
Hide entity_analytics_monitoring attribute Show entity_analytics_monitoring attribute object
- labels array[object]
  Hide labels attributes Show labels attributes object
  
  field string
  
  source string
  
  value string
event object
Hide event attribute Show event attribute object
- ingested string(date-time)
id string
labels object
Hide labels attributes Show labels attributes object
- source_indices array[string]
- source_integrations array[string]
- sources array
  
  Values are csv, index_sync, or api.
user object
Hide user attributes Show user attributes object
- is_privileged boolean
  
  Indicates if the user is privileged.
- name string

Responses

200 application/json

User updated successfully
Hide response attributes Show response attributes object
- @timestamp string(date-time)
- entity_analytics_monitoring object
  
  Hide entity_analytics_monitoring attribute Show entity_analytics_monitoring attribute object
  
  labels array[object]
  
  Hide labels attributes Show labels attributes object
  
  field string
  
  source string
  
  value string
- event object
  
  Hide event attribute Show event attribute object
  
  ingested string(date-time)
- id string
- labels object
  
  Hide labels attributes Show labels attributes object
  
  source_indices array[string]
  
  source_integrations array[string]
  
  sources array
  
  Values are csv, index_sync, or api.
- user object
  
  Hide user attributes Show user attributes object
  
  is_privileged boolean
  
  Indicates if the user is privileged.
  
  name string

PUT /api/entity_analytics/monitoring/users/{id}

curl \ --request PUT 'https://<KIBANA_URL>/api/entity_analytics/monitoring/users/{id}' \ --header "Authorization: $API_KEY" \ --header "Content-Type: application/json" \ --data '{"@timestamp":"2025-05-04T09:42:00Z","entity_analytics_monitoring":{"labels":[{"field":"string","source":"string","value":"string"}]},"event":{"ingested":"2025-05-04T09:42:00Z"},"id":"string","labels":{"source_indices":["string"],"source_integrations":["string"],"sources":["csv"]},"user":{"is_privileged":true,"name":"string"}}'