Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Elasticstack Provider
  4. API Docs
  5. KibanaSecurityEntityStore
Viewing docs for elasticstack 0.16.3
published on Thursday, Jul 23, 2026 by elastic
Schema (JSON)
elastic/terraform-provider-elasticstack

elasticstack.KibanaSecurityEntityStore

Viewing docs for elasticstack 0.16.3
published on Thursday, Jul 23, 2026 by elastic
Schema (JSON)
elastic/terraform-provider-elasticstack

    Manages the Elastic Security Entity Store lifecycle within a Kibana space.

    Create KibanaSecurityEntityStore Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new KibanaSecurityEntityStore(name: string, args?: KibanaSecurityEntityStoreArgs, opts?: CustomResourceOptions);
    @overload
def KibanaSecurityEntityStore(resource_name: str,
                              args: Optional[KibanaSecurityEntityStoreArgs] = None,
                              opts: Optional[ResourceOptions] = None)

@overload
def KibanaSecurityEntityStore(resource_name: str,
                              opts: Optional[ResourceOptions] = None,
                              allow_entity_type_shrink: Optional[bool] = None,
                              entity_types: Optional[Sequence[str]] = None,
                              history_snapshot: Optional[KibanaSecurityEntityStoreHistorySnapshotArgs] = None,
                              kibana_connections: Optional[Sequence[KibanaSecurityEntityStoreKibanaConnectionArgs]] = None,
                              log_extraction: Optional[KibanaSecurityEntityStoreLogExtractionArgs] = None,
                              space_id: Optional[str] = None,
                              started: Optional[bool] = None,
                              timeouts: Optional[KibanaSecurityEntityStoreTimeoutsArgs] = None)
    func NewKibanaSecurityEntityStore(ctx *Context, name string, args *KibanaSecurityEntityStoreArgs, opts ...ResourceOption) (*KibanaSecurityEntityStore, error)
    public KibanaSecurityEntityStore(string name, KibanaSecurityEntityStoreArgs? args = null, CustomResourceOptions? opts = null)
    public KibanaSecurityEntityStore(String name, KibanaSecurityEntityStoreArgs args)
public KibanaSecurityEntityStore(String name, KibanaSecurityEntityStoreArgs args, CustomResourceOptions options)

    type: elasticstack:KibanaSecurityEntityStore
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "elasticstack_kibana_security_entity_store" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args KibanaSecurityEntityStoreArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args KibanaSecurityEntityStoreArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args KibanaSecurityEntityStoreArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args KibanaSecurityEntityStoreArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args KibanaSecurityEntityStoreArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var kibanaSecurityEntityStoreResource = new Elasticstack.KibanaSecurityEntityStore("kibanaSecurityEntityStoreResource", new()
{
    AllowEntityTypeShrink = false,
    EntityTypes = new[]
    {
        "string",
    },
    HistorySnapshot = new Elasticstack.Inputs.KibanaSecurityEntityStoreHistorySnapshotArgs
    {
        Frequency = "string",
    },
    KibanaConnections = new[]
    {
        new Elasticstack.Inputs.KibanaSecurityEntityStoreKibanaConnectionArgs
        {
            ApiKey = "string",
            BearerToken = "string",
            CaCerts = new[]
            {
                "string",
            },
            Endpoints = new[]
            {
                "string",
            },
            Insecure = false,
            Password = "string",
            Username = "string",
        },
    },
    LogExtraction = new Elasticstack.Inputs.KibanaSecurityEntityStoreLogExtractionArgs
    {
        AdditionalIndexPatterns = new[]
        {
            "string",
        },
        Delay = "string",
        DocsLimit = 0,
        ExcludedIndexPatterns = new[]
        {
            "string",
        },
        FieldHistoryLength = 0,
        Frequency = "string",
        LookbackPeriod = "string",
        MaxLogsPerPage = 0,
        MaxLogsPerWindow = 0,
        MaxLogsPerWindowCapBehavior = "string",
        MaxTimeWindowSize = "string",
    },
    SpaceId = "string",
    Started = false,
    Timeouts = new Elasticstack.Inputs.KibanaSecurityEntityStoreTimeoutsArgs
    {
        Create = "string",
        Delete = "string",
        Read = "string",
        Update = "string",
    },
});

    example, err := elasticstack.NewKibanaSecurityEntityStore(ctx, "kibanaSecurityEntityStoreResource", &elasticstack.KibanaSecurityEntityStoreArgs{
	AllowEntityTypeShrink: pulumi.Bool(false),
	EntityTypes: pulumi.StringArray{
		pulumi.String("string"),
	},
	HistorySnapshot: &elasticstack.KibanaSecurityEntityStoreHistorySnapshotArgs{
		Frequency: pulumi.String("string"),
	},
	KibanaConnections: elasticstack.KibanaSecurityEntityStoreKibanaConnectionArray{
		&elasticstack.KibanaSecurityEntityStoreKibanaConnectionArgs{
			ApiKey:      pulumi.String("string"),
			BearerToken: pulumi.String("string"),
			CaCerts: pulumi.StringArray{
				pulumi.String("string"),
			},
			Endpoints: pulumi.StringArray{
				pulumi.String("string"),
			},
			Insecure: pulumi.Bool(false),
			Password: pulumi.String("string"),
			Username: pulumi.String("string"),
		},
	},
	LogExtraction: &elasticstack.KibanaSecurityEntityStoreLogExtractionArgs{
		AdditionalIndexPatterns: pulumi.StringArray{
			pulumi.String("string"),
		},
		Delay:     pulumi.String("string"),
		DocsLimit: pulumi.Float64(0),
		ExcludedIndexPatterns: pulumi.StringArray{
			pulumi.String("string"),
		},
		FieldHistoryLength:          pulumi.Float64(0),
		Frequency:                   pulumi.String("string"),
		LookbackPeriod:              pulumi.String("string"),
		MaxLogsPerPage:              pulumi.Float64(0),
		MaxLogsPerWindow:            pulumi.Float64(0),
		MaxLogsPerWindowCapBehavior: pulumi.String("string"),
		MaxTimeWindowSize:           pulumi.String("string"),
	},
	SpaceId: pulumi.String("string"),
	Started: pulumi.Bool(false),
	Timeouts: &elasticstack.KibanaSecurityEntityStoreTimeoutsArgs{
		Create: pulumi.String("string"),
		Delete: pulumi.String("string"),
		Read:   pulumi.String("string"),
		Update: pulumi.String("string"),
	},
})

    resource "elasticstack_kibana_security_entity_store" "kibanaSecurityEntityStoreResource" {
  lifecycle {
    create_before_destroy = true
  }
  allow_entity_type_shrink = false
  entity_types             = ["string"]
  history_snapshot = {
    frequency = "string"
  }
  kibana_connections {
    api_key      = "string"
    bearer_token = "string"
    ca_certs     = ["string"]
    endpoints    = ["string"]
    insecure     = false
    password     = "string"
    username     = "string"
  }
  log_extraction = {
    additional_index_patterns        = ["string"]
    delay                            = "string"
    docs_limit                       = 0
    excluded_index_patterns          = ["string"]
    field_history_length             = 0
    frequency                        = "string"
    lookback_period                  = "string"
    max_logs_per_page                = 0
    max_logs_per_window              = 0
    max_logs_per_window_cap_behavior = "string"
    max_time_window_size             = "string"
  }
  space_id = "string"
  started  = false
  timeouts = {
    create = "string"
    delete = "string"
    read   = "string"
    update = "string"
  }
}

    var kibanaSecurityEntityStoreResource = new KibanaSecurityEntityStore("kibanaSecurityEntityStoreResource", KibanaSecurityEntityStoreArgs.builder()
    .allowEntityTypeShrink(false)
    .entityTypes("string")
    .historySnapshot(KibanaSecurityEntityStoreHistorySnapshotArgs.builder()
        .frequency("string")
        .build())
    .kibanaConnections(KibanaSecurityEntityStoreKibanaConnectionArgs.builder()
        .apiKey("string")
        .bearerToken("string")
        .caCerts("string")
        .endpoints("string")
        .insecure(false)
        .password("string")
        .username("string")
        .build())
    .logExtraction(KibanaSecurityEntityStoreLogExtractionArgs.builder()
        .additionalIndexPatterns("string")
        .delay("string")
        .docsLimit(0.0)
        .excludedIndexPatterns("string")
        .fieldHistoryLength(0.0)
        .frequency("string")
        .lookbackPeriod("string")
        .maxLogsPerPage(0.0)
        .maxLogsPerWindow(0.0)
        .maxLogsPerWindowCapBehavior("string")
        .maxTimeWindowSize("string")
        .build())
    .spaceId("string")
    .started(false)
    .timeouts(KibanaSecurityEntityStoreTimeoutsArgs.builder()
        .create("string")
        .delete("string")
        .read("string")
        .update("string")
        .build())
    .build());

    kibana_security_entity_store_resource = elasticstack.KibanaSecurityEntityStore("kibanaSecurityEntityStoreResource",
    allow_entity_type_shrink=False,
    entity_types=["string"],
    history_snapshot={
        "frequency": "string",
    },
    kibana_connections=[{
        "api_key": "string",
        "bearer_token": "string",
        "ca_certs": ["string"],
        "endpoints": ["string"],
        "insecure": False,
        "password": "string",
        "username": "string",
    }],
    log_extraction={
        "additional_index_patterns": ["string"],
        "delay": "string",
        "docs_limit": float(0),
        "excluded_index_patterns": ["string"],
        "field_history_length": float(0),
        "frequency": "string",
        "lookback_period": "string",
        "max_logs_per_page": float(0),
        "max_logs_per_window": float(0),
        "max_logs_per_window_cap_behavior": "string",
        "max_time_window_size": "string",
    },
    space_id="string",
    started=False,
    timeouts={
        "create": "string",
        "delete": "string",
        "read": "string",
        "update": "string",
    })

    const kibanaSecurityEntityStoreResource = new elasticstack.KibanaSecurityEntityStore("kibanaSecurityEntityStoreResource", {
    allowEntityTypeShrink: false,
    entityTypes: ["string"],
    historySnapshot: {
        frequency: "string",
    },
    kibanaConnections: [{
        apiKey: "string",
        bearerToken: "string",
        caCerts: ["string"],
        endpoints: ["string"],
        insecure: false,
        password: "string",
        username: "string",
    }],
    logExtraction: {
        additionalIndexPatterns: ["string"],
        delay: "string",
        docsLimit: 0,
        excludedIndexPatterns: ["string"],
        fieldHistoryLength: 0,
        frequency: "string",
        lookbackPeriod: "string",
        maxLogsPerPage: 0,
        maxLogsPerWindow: 0,
        maxLogsPerWindowCapBehavior: "string",
        maxTimeWindowSize: "string",
    },
    spaceId: "string",
    started: false,
    timeouts: {
        create: "string",
        "delete": "string",
        read: "string",
        update: "string",
    },
});

    type: elasticstack:KibanaSecurityEntityStore
properties:
    allowEntityTypeShrink: false
    entityTypes:
        - string
    historySnapshot:
        frequency: string
    kibanaConnections:
        - apiKey: string
          bearerToken: string
          caCerts:
            - string
          endpoints:
            - string
          insecure: false
          password: string
          username: string
    logExtraction:
        additionalIndexPatterns:
            - string
        delay: string
        docsLimit: 0
        excludedIndexPatterns:
            - string
        fieldHistoryLength: 0
        frequency: string
        lookbackPeriod: string
        maxLogsPerPage: 0
        maxLogsPerWindow: 0
        maxLogsPerWindowCapBehavior: string
        maxTimeWindowSize: string
    spaceId: string
    started: false
    timeouts:
        create: string
        delete: string
        read: string
        update: string

    KibanaSecurityEntityStore Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The KibanaSecurityEntityStore resource accepts the following input properties:

    AllowEntityTypeShrink bool
    EntityTypes List<string>
    Entity types to install and manage. Valid values are user, host, service, and generic.
    HistorySnapshot KibanaSecurityEntityStoreHistorySnapshot
    Install-only history snapshot settings.
    KibanaConnections List<KibanaSecurityEntityStoreKibanaConnection>
    Kibana connection configuration block.
    LogExtraction KibanaSecurityEntityStoreLogExtraction
    Optional log extraction settings for the entity store.
    SpaceId string
    An identifier for the space. If space_id is not provided, the default space is used.
    Started bool
    Whether any managed entity engine should be running after reconciliation.
    Timeouts KibanaSecurityEntityStoreTimeouts
    AllowEntityTypeShrink bool
    EntityTypes []string
    Entity types to install and manage. Valid values are user, host, service, and generic.
    HistorySnapshot KibanaSecurityEntityStoreHistorySnapshotArgs
    Install-only history snapshot settings.
    KibanaConnections []KibanaSecurityEntityStoreKibanaConnectionArgs
    Kibana connection configuration block.
    LogExtraction KibanaSecurityEntityStoreLogExtractionArgs
    Optional log extraction settings for the entity store.
    SpaceId string
    An identifier for the space. If space_id is not provided, the default space is used.
    Started bool
    Whether any managed entity engine should be running after reconciliation.
    Timeouts KibanaSecurityEntityStoreTimeoutsArgs
    allow_entity_type_shrink bool
    entity_types list(string)
    Entity types to install and manage. Valid values are user, host, service, and generic.
    history_snapshot object
    Install-only history snapshot settings.
    kibana_connections list(object)
    Kibana connection configuration block.
    log_extraction object
    Optional log extraction settings for the entity store.
    space_id string
    An identifier for the space. If space_id is not provided, the default space is used.
    started bool
    Whether any managed entity engine should be running after reconciliation.
    timeouts object
    allowEntityTypeShrink Boolean
    entityTypes List<String>
    Entity types to install and manage. Valid values are user, host, service, and generic.
    historySnapshot KibanaSecurityEntityStoreHistorySnapshot
    Install-only history snapshot settings.
    kibanaConnections List<KibanaSecurityEntityStoreKibanaConnection>
    Kibana connection configuration block.
    logExtraction KibanaSecurityEntityStoreLogExtraction
    Optional log extraction settings for the entity store.
    spaceId String
    An identifier for the space. If space_id is not provided, the default space is used.
    started Boolean
    Whether any managed entity engine should be running after reconciliation.
    timeouts KibanaSecurityEntityStoreTimeouts
    allowEntityTypeShrink boolean
    entityTypes string[]
    Entity types to install and manage. Valid values are user, host, service, and generic.
    historySnapshot KibanaSecurityEntityStoreHistorySnapshot
    Install-only history snapshot settings.
    kibanaConnections KibanaSecurityEntityStoreKibanaConnection[]
    Kibana connection configuration block.
    logExtraction KibanaSecurityEntityStoreLogExtraction
    Optional log extraction settings for the entity store.
    spaceId string
    An identifier for the space. If space_id is not provided, the default space is used.
    started boolean
    Whether any managed entity engine should be running after reconciliation.
    timeouts KibanaSecurityEntityStoreTimeouts
    allow_entity_type_shrink bool
    entity_types Sequence[str]
    Entity types to install and manage. Valid values are user, host, service, and generic.
    history_snapshot KibanaSecurityEntityStoreHistorySnapshotArgs
    Install-only history snapshot settings.
    kibana_connections Sequence[KibanaSecurityEntityStoreKibanaConnectionArgs]
    Kibana connection configuration block.
    log_extraction KibanaSecurityEntityStoreLogExtractionArgs
    Optional log extraction settings for the entity store.
    space_id str
    An identifier for the space. If space_id is not provided, the default space is used.
    started bool
    Whether any managed entity engine should be running after reconciliation.
    timeouts KibanaSecurityEntityStoreTimeoutsArgs
    allowEntityTypeShrink Boolean
    entityTypes List<String>
    Entity types to install and manage. Valid values are user, host, service, and generic.
    historySnapshot Property Map
    Install-only history snapshot settings.
    kibanaConnections List<Property Map>
    Kibana connection configuration block.
    logExtraction Property Map
    Optional log extraction settings for the entity store.
    spaceId String
    An identifier for the space. If space_id is not provided, the default space is used.
    started Boolean
    Whether any managed entity engine should be running after reconciliation.
    timeouts Property Map

    Outputs

    All input properties are implicitly available as output properties. Additionally, the KibanaSecurityEntityStore resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    StatusJson string
    Normalized JSON representation of the most recent entity store status response.
    Id string
    The provider-assigned unique ID for this managed resource.
    StatusJson string
    Normalized JSON representation of the most recent entity store status response.
    id string
    The provider-assigned unique ID for this managed resource.
    status_json string
    Normalized JSON representation of the most recent entity store status response.
    id String
    The provider-assigned unique ID for this managed resource.
    statusJson String
    Normalized JSON representation of the most recent entity store status response.
    id string
    The provider-assigned unique ID for this managed resource.
    statusJson string
    Normalized JSON representation of the most recent entity store status response.
    id str
    The provider-assigned unique ID for this managed resource.
    status_json str
    Normalized JSON representation of the most recent entity store status response.
    id String
    The provider-assigned unique ID for this managed resource.
    statusJson String
    Normalized JSON representation of the most recent entity store status response.

    Look up Existing KibanaSecurityEntityStore Resource

    Get an existing KibanaSecurityEntityStore resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: KibanaSecurityEntityStoreState, opts?: CustomResourceOptions): KibanaSecurityEntityStore
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        allow_entity_type_shrink: Optional[bool] = None,
        entity_types: Optional[Sequence[str]] = None,
        history_snapshot: Optional[KibanaSecurityEntityStoreHistorySnapshotArgs] = None,
        kibana_connections: Optional[Sequence[KibanaSecurityEntityStoreKibanaConnectionArgs]] = None,
        log_extraction: Optional[KibanaSecurityEntityStoreLogExtractionArgs] = None,
        space_id: Optional[str] = None,
        started: Optional[bool] = None,
        status_json: Optional[str] = None,
        timeouts: Optional[KibanaSecurityEntityStoreTimeoutsArgs] = None) -> KibanaSecurityEntityStore
    func GetKibanaSecurityEntityStore(ctx *Context, name string, id IDInput, state *KibanaSecurityEntityStoreState, opts ...ResourceOption) (*KibanaSecurityEntityStore, error)
    public static KibanaSecurityEntityStore Get(string name, Input<string> id, KibanaSecurityEntityStoreState? state, CustomResourceOptions? opts = null)
    public static KibanaSecurityEntityStore get(String name, Output<String> id, KibanaSecurityEntityStoreState state, CustomResourceOptions options)
    resources:  _:    type: elasticstack:KibanaSecurityEntityStore    get:      id: ${id}
    import {
  to = elasticstack_kibana_security_entity_store.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AllowEntityTypeShrink bool
    EntityTypes List<string>
    Entity types to install and manage. Valid values are user, host, service, and generic.
    HistorySnapshot KibanaSecurityEntityStoreHistorySnapshot
    Install-only history snapshot settings.
    KibanaConnections List<KibanaSecurityEntityStoreKibanaConnection>
    Kibana connection configuration block.
    LogExtraction KibanaSecurityEntityStoreLogExtraction
    Optional log extraction settings for the entity store.
    SpaceId string
    An identifier for the space. If space_id is not provided, the default space is used.
    Started bool
    Whether any managed entity engine should be running after reconciliation.
    StatusJson string
    Normalized JSON representation of the most recent entity store status response.
    Timeouts KibanaSecurityEntityStoreTimeouts
    AllowEntityTypeShrink bool
    EntityTypes []string
    Entity types to install and manage. Valid values are user, host, service, and generic.
    HistorySnapshot KibanaSecurityEntityStoreHistorySnapshotArgs
    Install-only history snapshot settings.
    KibanaConnections []KibanaSecurityEntityStoreKibanaConnectionArgs
    Kibana connection configuration block.
    LogExtraction KibanaSecurityEntityStoreLogExtractionArgs
    Optional log extraction settings for the entity store.
    SpaceId string
    An identifier for the space. If space_id is not provided, the default space is used.
    Started bool
    Whether any managed entity engine should be running after reconciliation.
    StatusJson string
    Normalized JSON representation of the most recent entity store status response.
    Timeouts KibanaSecurityEntityStoreTimeoutsArgs
    allow_entity_type_shrink bool
    entity_types list(string)
    Entity types to install and manage. Valid values are user, host, service, and generic.
    history_snapshot object
    Install-only history snapshot settings.
    kibana_connections list(object)
    Kibana connection configuration block.
    log_extraction object
    Optional log extraction settings for the entity store.
    space_id string
    An identifier for the space. If space_id is not provided, the default space is used.
    started bool
    Whether any managed entity engine should be running after reconciliation.
    status_json string
    Normalized JSON representation of the most recent entity store status response.
    timeouts object
    allowEntityTypeShrink Boolean
    entityTypes List<String>
    Entity types to install and manage. Valid values are user, host, service, and generic.
    historySnapshot KibanaSecurityEntityStoreHistorySnapshot
    Install-only history snapshot settings.
    kibanaConnections List<KibanaSecurityEntityStoreKibanaConnection>
    Kibana connection configuration block.
    logExtraction KibanaSecurityEntityStoreLogExtraction
    Optional log extraction settings for the entity store.
    spaceId String
    An identifier for the space. If space_id is not provided, the default space is used.
    started Boolean
    Whether any managed entity engine should be running after reconciliation.
    statusJson String
    Normalized JSON representation of the most recent entity store status response.
    timeouts KibanaSecurityEntityStoreTimeouts
    allowEntityTypeShrink boolean
    entityTypes string[]
    Entity types to install and manage. Valid values are user, host, service, and generic.
    historySnapshot KibanaSecurityEntityStoreHistorySnapshot
    Install-only history snapshot settings.
    kibanaConnections KibanaSecurityEntityStoreKibanaConnection[]
    Kibana connection configuration block.
    logExtraction KibanaSecurityEntityStoreLogExtraction
    Optional log extraction settings for the entity store.
    spaceId string
    An identifier for the space. If space_id is not provided, the default space is used.
    started boolean
    Whether any managed entity engine should be running after reconciliation.
    statusJson string
    Normalized JSON representation of the most recent entity store status response.
    timeouts KibanaSecurityEntityStoreTimeouts
    allow_entity_type_shrink bool
    entity_types Sequence[str]
    Entity types to install and manage. Valid values are user, host, service, and generic.
    history_snapshot KibanaSecurityEntityStoreHistorySnapshotArgs
    Install-only history snapshot settings.
    kibana_connections Sequence[KibanaSecurityEntityStoreKibanaConnectionArgs]
    Kibana connection configuration block.
    log_extraction KibanaSecurityEntityStoreLogExtractionArgs
    Optional log extraction settings for the entity store.
    space_id str
    An identifier for the space. If space_id is not provided, the default space is used.
    started bool
    Whether any managed entity engine should be running after reconciliation.
    status_json str
    Normalized JSON representation of the most recent entity store status response.
    timeouts KibanaSecurityEntityStoreTimeoutsArgs
    allowEntityTypeShrink Boolean
    entityTypes List<String>
    Entity types to install and manage. Valid values are user, host, service, and generic.
    historySnapshot Property Map
    Install-only history snapshot settings.
    kibanaConnections List<Property Map>
    Kibana connection configuration block.
    logExtraction Property Map
    Optional log extraction settings for the entity store.
    spaceId String
    An identifier for the space. If space_id is not provided, the default space is used.
    started Boolean
    Whether any managed entity engine should be running after reconciliation.
    statusJson String
    Normalized JSON representation of the most recent entity store status response.
    timeouts Property Map

    Supporting Types

    KibanaSecurityEntityStoreHistorySnapshot, KibanaSecurityEntityStoreHistorySnapshotArgs

    Frequency string
    History snapshot frequency used during installation.
    Frequency string
    History snapshot frequency used during installation.
    frequency string
    History snapshot frequency used during installation.
    frequency String
    History snapshot frequency used during installation.
    frequency string
    History snapshot frequency used during installation.
    frequency str
    History snapshot frequency used during installation.
    frequency String
    History snapshot frequency used during installation.

    KibanaSecurityEntityStoreKibanaConnection, KibanaSecurityEntityStoreKibanaConnectionArgs

    ApiKey string
    API Key to use for authentication to Kibana
    BearerToken string
    Bearer Token to use for authentication to Kibana
    CaCerts List<string>
    A list of paths to CA certificates to validate the certificate presented by the Kibana server.
    Endpoints List<string>
    Insecure bool
    Disable TLS certificate validation
    Password string
    Password to use for API authentication to Kibana.
    Username string
    Username to use for API authentication to Kibana.
    ApiKey string
    API Key to use for authentication to Kibana
    BearerToken string
    Bearer Token to use for authentication to Kibana
    CaCerts []string
    A list of paths to CA certificates to validate the certificate presented by the Kibana server.
    Endpoints []string
    Insecure bool
    Disable TLS certificate validation
    Password string
    Password to use for API authentication to Kibana.
    Username string
    Username to use for API authentication to Kibana.
    api_key string
    API Key to use for authentication to Kibana
    bearer_token string
    Bearer Token to use for authentication to Kibana
    ca_certs list(string)
    A list of paths to CA certificates to validate the certificate presented by the Kibana server.
    endpoints list(string)
    insecure bool
    Disable TLS certificate validation
    password string
    Password to use for API authentication to Kibana.
    username string
    Username to use for API authentication to Kibana.
    apiKey String
    API Key to use for authentication to Kibana
    bearerToken String
    Bearer Token to use for authentication to Kibana
    caCerts List<String>
    A list of paths to CA certificates to validate the certificate presented by the Kibana server.
    endpoints List<String>
    insecure Boolean
    Disable TLS certificate validation
    password String
    Password to use for API authentication to Kibana.
    username String
    Username to use for API authentication to Kibana.
    apiKey string
    API Key to use for authentication to Kibana
    bearerToken string
    Bearer Token to use for authentication to Kibana
    caCerts string[]
    A list of paths to CA certificates to validate the certificate presented by the Kibana server.
    endpoints string[]
    insecure boolean
    Disable TLS certificate validation
    password string
    Password to use for API authentication to Kibana.
    username string
    Username to use for API authentication to Kibana.
    api_key str
    API Key to use for authentication to Kibana
    bearer_token str
    Bearer Token to use for authentication to Kibana
    ca_certs Sequence[str]
    A list of paths to CA certificates to validate the certificate presented by the Kibana server.
    endpoints Sequence[str]
    insecure bool
    Disable TLS certificate validation
    password str
    Password to use for API authentication to Kibana.
    username str
    Username to use for API authentication to Kibana.
    apiKey String
    API Key to use for authentication to Kibana
    bearerToken String
    Bearer Token to use for authentication to Kibana
    caCerts List<String>
    A list of paths to CA certificates to validate the certificate presented by the Kibana server.
    endpoints List<String>
    insecure Boolean
    Disable TLS certificate validation
    password String
    Password to use for API authentication to Kibana.
    username String
    Username to use for API authentication to Kibana.

    KibanaSecurityEntityStoreLogExtraction, KibanaSecurityEntityStoreLogExtractionArgs

    KibanaSecurityEntityStoreTimeouts, KibanaSecurityEntityStoreTimeoutsArgs

    Create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    Delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    Read string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    Update string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    Create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    Delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    Read string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    Update string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    read string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    update string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    read String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    update String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    read string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    update string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create str
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete str
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    read str
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    update str
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    read String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    update String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).

    Package Details

    Repository
    elasticstack elastic/terraform-provider-elasticstack
    License
    Notes
    This Pulumi package is based on the elasticstack Terraform Provider.
    Viewing docs for elasticstack 0.16.3
    published on Thursday, Jul 23, 2026 by elastic
    Schema (JSON)
    elastic/terraform-provider-elasticstack

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial