Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Elasticstack Provider
  4. API Docs
  5. KibanaSecurityEntityStoreEntity
Viewing docs for elasticstack 0.16.3
published on Thursday, Jul 23, 2026 by elastic
Schema (JSON)
elastic/terraform-provider-elasticstack

elasticstack.KibanaSecurityEntityStoreEntity

Viewing docs for elasticstack 0.16.3
published on Thursday, Jul 23, 2026 by elastic
Schema (JSON)
elastic/terraform-provider-elasticstack

    Manages a single entity record in the Kibana Security Entity Store.

    Create KibanaSecurityEntityStoreEntity Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new KibanaSecurityEntityStoreEntity(name: string, args: KibanaSecurityEntityStoreEntityArgs, opts?: CustomResourceOptions);
    @overload
def KibanaSecurityEntityStoreEntity(resource_name: str,
                                    args: KibanaSecurityEntityStoreEntityArgs,
                                    opts: Optional[ResourceOptions] = None)

@overload
def KibanaSecurityEntityStoreEntity(resource_name: str,
                                    opts: Optional[ResourceOptions] = None,
                                    entity_id: Optional[str] = None,
                                    entity_type: Optional[str] = None,
                                    host_json: Optional[str] = None,
                                    event: Optional[KibanaSecurityEntityStoreEntityEventArgs] = None,
                                    entity: Optional[KibanaSecurityEntityStoreEntityEntityArgs] = None,
                                    cloud: Optional[KibanaSecurityEntityStoreEntityCloudArgs] = None,
                                    entity_json: Optional[str] = None,
                                    asset_json: Optional[str] = None,
                                    kibana_connections: Optional[Sequence[KibanaSecurityEntityStoreEntityKibanaConnectionArgs]] = None,
                                    event_json: Optional[str] = None,
                                    force: Optional[bool] = None,
                                    host: Optional[KibanaSecurityEntityStoreEntityHostArgs] = None,
                                    cloud_json: Optional[str] = None,
                                    asset: Optional[KibanaSecurityEntityStoreEntityAssetArgs] = None,
                                    service: Optional[KibanaSecurityEntityStoreEntityServiceArgs] = None,
                                    labels_json: Optional[str] = None,
                                    orchestrator: Optional[KibanaSecurityEntityStoreEntityOrchestratorArgs] = None,
                                    orchestrator_json: Optional[str] = None,
                                    labels: Optional[Mapping[str, str]] = None,
                                    service_json: Optional[str] = None,
                                    space_id: Optional[str] = None,
                                    tags: Optional[Sequence[str]] = None,
                                    timeouts: Optional[KibanaSecurityEntityStoreEntityTimeoutsArgs] = None,
                                    timestamp: Optional[str] = None,
                                    user: Optional[KibanaSecurityEntityStoreEntityUserArgs] = None,
                                    user_json: Optional[str] = None)
    func NewKibanaSecurityEntityStoreEntity(ctx *Context, name string, args KibanaSecurityEntityStoreEntityArgs, opts ...ResourceOption) (*KibanaSecurityEntityStoreEntity, error)
    public KibanaSecurityEntityStoreEntity(string name, KibanaSecurityEntityStoreEntityArgs args, CustomResourceOptions? opts = null)
    public KibanaSecurityEntityStoreEntity(String name, KibanaSecurityEntityStoreEntityArgs args)
public KibanaSecurityEntityStoreEntity(String name, KibanaSecurityEntityStoreEntityArgs args, CustomResourceOptions options)

    type: elasticstack:KibanaSecurityEntityStoreEntity
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "elasticstack_kibana_security_entity_store_entity" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args KibanaSecurityEntityStoreEntityArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args KibanaSecurityEntityStoreEntityArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args KibanaSecurityEntityStoreEntityArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args KibanaSecurityEntityStoreEntityArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args KibanaSecurityEntityStoreEntityArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var kibanaSecurityEntityStoreEntityResource = new Elasticstack.KibanaSecurityEntityStoreEntity("kibanaSecurityEntityStoreEntityResource", new()
{
    EntityId = "string",
    EntityType = "string",
    HostJson = "string",
    Event = new Elasticstack.Inputs.KibanaSecurityEntityStoreEntityEventArgs
    {
        Action = "string",
        Category = "string",
        Code = "string",
        Dataset = "string",
        Ingested = "string",
        Kind = "string",
        Outcome = "string",
        Provider = "string",
        Reason = "string",
        Reference = "string",
        Severity = "string",
        Timezone = "string",
        Type = "string",
        Url = "string",
    },
    Entity = new Elasticstack.Inputs.KibanaSecurityEntityStoreEntityEntityArgs
    {
        Id = "string",
        Attributes = new Elasticstack.Inputs.KibanaSecurityEntityStoreEntityEntityAttributesArgs
        {
            Asset = false,
            Managed = false,
            MfaEnabled = false,
            Privileged = false,
        },
        Behaviors = new Elasticstack.Inputs.KibanaSecurityEntityStoreEntityEntityBehaviorsArgs
        {
            BruteForceVictim = false,
            NewCountryLogin = false,
            UsedUsbDevice = false,
        },
        Lifecycle = new Elasticstack.Inputs.KibanaSecurityEntityStoreEntityEntityLifecycleArgs
        {
            FirstSeen = "string",
            LastActivity = "string",
            LastSeen = "string",
        },
        Name = "string",
        Relationships = new Elasticstack.Inputs.KibanaSecurityEntityStoreEntityEntityRelationshipsArgs
        {
            AccessedFrequentlyBies = new[]
            {
                "string",
            },
            AccessesFrequentlies = new[]
            {
                "string",
            },
            AccessesInfrequentlies = new[]
            {
                "string",
            },
            CommunicatesWiths = new[]
            {
                "string",
            },
            DependentOfs = new[]
            {
                "string",
            },
            DependsOns = new[]
            {
                "string",
            },
            OwnedBies = new[]
            {
                "string",
            },
            Owns = new[]
            {
                "string",
            },
            SupervisedBies = new[]
            {
                "string",
            },
            Supervises = new[]
            {
                "string",
            },
        },
        Risk = new Elasticstack.Inputs.KibanaSecurityEntityStoreEntityEntityRiskArgs
        {
            CalculatedLevel = "string",
            CalculatedScore = 0,
            CalculatedScoreNorm = 0,
        },
        Sources = new[]
        {
            "string",
        },
        SubType = "string",
        Type = "string",
    },
    Cloud = new Elasticstack.Inputs.KibanaSecurityEntityStoreEntityCloudArgs
    {
        AccountId = "string",
        AccountName = "string",
        ProjectId = "string",
        ProjectName = "string",
        Provider = "string",
        Region = "string",
        ServiceName = "string",
    },
    EntityJson = "string",
    AssetJson = "string",
    KibanaConnections = new[]
    {
        new Elasticstack.Inputs.KibanaSecurityEntityStoreEntityKibanaConnectionArgs
        {
            ApiKey = "string",
            BearerToken = "string",
            CaCerts = new[]
            {
                "string",
            },
            Endpoints = new[]
            {
                "string",
            },
            Insecure = false,
            Password = "string",
            Username = "string",
        },
    },
    EventJson = "string",
    Force = false,
    Host = new Elasticstack.Inputs.KibanaSecurityEntityStoreEntityHostArgs
    {
        Name = "string",
        Architectures = new[]
        {
            "string",
        },
        Domains = new[]
        {
            "string",
        },
        Hostnames = new[]
        {
            "string",
        },
        Ids = new[]
        {
            "string",
        },
        Ips = new[]
        {
            "string",
        },
        Macs = new[]
        {
            "string",
        },
        Os = new Elasticstack.Inputs.KibanaSecurityEntityStoreEntityHostOsArgs
        {
            Family = "string",
            Full = "string",
            Kernel = "string",
            Name = "string",
            Platform = "string",
            Type = "string",
            Version = "string",
        },
        Risk = new Elasticstack.Inputs.KibanaSecurityEntityStoreEntityHostRiskArgs
        {
            CalculatedLevel = "string",
            CalculatedScore = 0,
            CalculatedScoreNorm = 0,
        },
        Types = new[]
        {
            "string",
        },
    },
    CloudJson = "string",
    Asset = new Elasticstack.Inputs.KibanaSecurityEntityStoreEntityAssetArgs
    {
        Criticality = "string",
        CriticalityFeedback = new Elasticstack.Inputs.KibanaSecurityEntityStoreEntityAssetCriticalityFeedbackArgs
        {
            Notes = "string",
            Reason = "string",
        },
        Owner = new Elasticstack.Inputs.KibanaSecurityEntityStoreEntityAssetOwnerArgs
        {
            Department = "string",
            Email = "string",
            Ext = "string",
            Name = "string",
        },
        Value = 0,
    },
    Service = new Elasticstack.Inputs.KibanaSecurityEntityStoreEntityServiceArgs
    {
        Name = "string",
        Risk = new Elasticstack.Inputs.KibanaSecurityEntityStoreEntityServiceRiskArgs
        {
            CalculatedLevel = "string",
            CalculatedScore = 0,
            CalculatedScoreNorm = 0,
        },
    },
    LabelsJson = "string",
    Orchestrator = new Elasticstack.Inputs.KibanaSecurityEntityStoreEntityOrchestratorArgs
    {
        ClusterId = "string",
        ClusterName = "string",
        ClusterVersion = "string",
        Name = "string",
        Namespace = "string",
        ResourceId = "string",
        ResourceName = "string",
        ResourceType = "string",
        Type = "string",
    },
    OrchestratorJson = "string",
    Labels = 
    {
        { "string", "string" },
    },
    ServiceJson = "string",
    SpaceId = "string",
    Tags = new[]
    {
        "string",
    },
    Timeouts = new Elasticstack.Inputs.KibanaSecurityEntityStoreEntityTimeoutsArgs
    {
        Create = "string",
        Delete = "string",
        Read = "string",
        Update = "string",
    },
    Timestamp = "string",
    User = new Elasticstack.Inputs.KibanaSecurityEntityStoreEntityUserArgs
    {
        Name = "string",
        Domains = new[]
        {
            "string",
        },
        Emails = new[]
        {
            "string",
        },
        FullNames = new[]
        {
            "string",
        },
        Hashes = new[]
        {
            "string",
        },
        Ids = new[]
        {
            "string",
        },
        Risk = new Elasticstack.Inputs.KibanaSecurityEntityStoreEntityUserRiskArgs
        {
            CalculatedLevel = "string",
            CalculatedScore = 0,
            CalculatedScoreNorm = 0,
        },
        Roles = new[]
        {
            "string",
        },
    },
    UserJson = "string",
});

    example, err := elasticstack.NewKibanaSecurityEntityStoreEntity(ctx, "kibanaSecurityEntityStoreEntityResource", &elasticstack.KibanaSecurityEntityStoreEntityArgs{
	EntityId:   pulumi.String("string"),
	EntityType: pulumi.String("string"),
	HostJson:   pulumi.String("string"),
	Event: &elasticstack.KibanaSecurityEntityStoreEntityEventArgs{
		Action:    pulumi.String("string"),
		Category:  pulumi.String("string"),
		Code:      pulumi.String("string"),
		Dataset:   pulumi.String("string"),
		Ingested:  pulumi.String("string"),
		Kind:      pulumi.String("string"),
		Outcome:   pulumi.String("string"),
		Provider:  pulumi.String("string"),
		Reason:    pulumi.String("string"),
		Reference: pulumi.String("string"),
		Severity:  pulumi.String("string"),
		Timezone:  pulumi.String("string"),
		Type:      pulumi.String("string"),
		Url:       pulumi.String("string"),
	},
	Entity: &elasticstack.KibanaSecurityEntityStoreEntityEntityArgs{
		Id: pulumi.String("string"),
		Attributes: &elasticstack.KibanaSecurityEntityStoreEntityEntityAttributesArgs{
			Asset:      pulumi.Bool(false),
			Managed:    pulumi.Bool(false),
			MfaEnabled: pulumi.Bool(false),
			Privileged: pulumi.Bool(false),
		},
		Behaviors: &elasticstack.KibanaSecurityEntityStoreEntityEntityBehaviorsArgs{
			BruteForceVictim: pulumi.Bool(false),
			NewCountryLogin:  pulumi.Bool(false),
			UsedUsbDevice:    pulumi.Bool(false),
		},
		Lifecycle: &elasticstack.KibanaSecurityEntityStoreEntityEntityLifecycleArgs{
			FirstSeen:    pulumi.String("string"),
			LastActivity: pulumi.String("string"),
			LastSeen:     pulumi.String("string"),
		},
		Name: pulumi.String("string"),
		Relationships: &elasticstack.KibanaSecurityEntityStoreEntityEntityRelationshipsArgs{
			AccessedFrequentlyBies: pulumi.StringArray{
				pulumi.String("string"),
			},
			AccessesFrequentlies: pulumi.StringArray{
				pulumi.String("string"),
			},
			AccessesInfrequentlies: pulumi.StringArray{
				pulumi.String("string"),
			},
			CommunicatesWiths: pulumi.StringArray{
				pulumi.String("string"),
			},
			DependentOfs: pulumi.StringArray{
				pulumi.String("string"),
			},
			DependsOns: pulumi.StringArray{
				pulumi.String("string"),
			},
			OwnedBies: pulumi.StringArray{
				pulumi.String("string"),
			},
			Owns: pulumi.StringArray{
				pulumi.String("string"),
			},
			SupervisedBies: pulumi.StringArray{
				pulumi.String("string"),
			},
			Supervises: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		Risk: &elasticstack.KibanaSecurityEntityStoreEntityEntityRiskArgs{
			CalculatedLevel:     pulumi.String("string"),
			CalculatedScore:     pulumi.Float64(0),
			CalculatedScoreNorm: pulumi.Float64(0),
		},
		Sources: pulumi.StringArray{
			pulumi.String("string"),
		},
		SubType: pulumi.String("string"),
		Type:    pulumi.String("string"),
	},
	Cloud: &elasticstack.KibanaSecurityEntityStoreEntityCloudArgs{
		AccountId:   pulumi.String("string"),
		AccountName: pulumi.String("string"),
		ProjectId:   pulumi.String("string"),
		ProjectName: pulumi.String("string"),
		Provider:    pulumi.String("string"),
		Region:      pulumi.String("string"),
		ServiceName: pulumi.String("string"),
	},
	EntityJson: pulumi.String("string"),
	AssetJson:  pulumi.String("string"),
	KibanaConnections: elasticstack.KibanaSecurityEntityStoreEntityKibanaConnectionArray{
		&elasticstack.KibanaSecurityEntityStoreEntityKibanaConnectionArgs{
			ApiKey:      pulumi.String("string"),
			BearerToken: pulumi.String("string"),
			CaCerts: pulumi.StringArray{
				pulumi.String("string"),
			},
			Endpoints: pulumi.StringArray{
				pulumi.String("string"),
			},
			Insecure: pulumi.Bool(false),
			Password: pulumi.String("string"),
			Username: pulumi.String("string"),
		},
	},
	EventJson: pulumi.String("string"),
	Force:     pulumi.Bool(false),
	Host: &elasticstack.KibanaSecurityEntityStoreEntityHostArgs{
		Name: pulumi.String("string"),
		Architectures: pulumi.StringArray{
			pulumi.String("string"),
		},
		Domains: pulumi.StringArray{
			pulumi.String("string"),
		},
		Hostnames: pulumi.StringArray{
			pulumi.String("string"),
		},
		Ids: pulumi.StringArray{
			pulumi.String("string"),
		},
		Ips: pulumi.StringArray{
			pulumi.String("string"),
		},
		Macs: pulumi.StringArray{
			pulumi.String("string"),
		},
		Os: &elasticstack.KibanaSecurityEntityStoreEntityHostOsArgs{
			Family:   pulumi.String("string"),
			Full:     pulumi.String("string"),
			Kernel:   pulumi.String("string"),
			Name:     pulumi.String("string"),
			Platform: pulumi.String("string"),
			Type:     pulumi.String("string"),
			Version:  pulumi.String("string"),
		},
		Risk: &elasticstack.KibanaSecurityEntityStoreEntityHostRiskArgs{
			CalculatedLevel:     pulumi.String("string"),
			CalculatedScore:     pulumi.Float64(0),
			CalculatedScoreNorm: pulumi.Float64(0),
		},
		Types: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	CloudJson: pulumi.String("string"),
	Asset: &elasticstack.KibanaSecurityEntityStoreEntityAssetArgs{
		Criticality: pulumi.String("string"),
		CriticalityFeedback: &elasticstack.KibanaSecurityEntityStoreEntityAssetCriticalityFeedbackArgs{
			Notes:  pulumi.String("string"),
			Reason: pulumi.String("string"),
		},
		Owner: &elasticstack.KibanaSecurityEntityStoreEntityAssetOwnerArgs{
			Department: pulumi.String("string"),
			Email:      pulumi.String("string"),
			Ext:        pulumi.String("string"),
			Name:       pulumi.String("string"),
		},
		Value: pulumi.Float64(0),
	},
	Service: &elasticstack.KibanaSecurityEntityStoreEntityServiceArgs{
		Name: pulumi.String("string"),
		Risk: &elasticstack.KibanaSecurityEntityStoreEntityServiceRiskArgs{
			CalculatedLevel:     pulumi.String("string"),
			CalculatedScore:     pulumi.Float64(0),
			CalculatedScoreNorm: pulumi.Float64(0),
		},
	},
	LabelsJson: pulumi.String("string"),
	Orchestrator: &elasticstack.KibanaSecurityEntityStoreEntityOrchestratorArgs{
		ClusterId:      pulumi.String("string"),
		ClusterName:    pulumi.String("string"),
		ClusterVersion: pulumi.String("string"),
		Name:           pulumi.String("string"),
		Namespace:      pulumi.String("string"),
		ResourceId:     pulumi.String("string"),
		ResourceName:   pulumi.String("string"),
		ResourceType:   pulumi.String("string"),
		Type:           pulumi.String("string"),
	},
	OrchestratorJson: pulumi.String("string"),
	Labels: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	ServiceJson: pulumi.String("string"),
	SpaceId:     pulumi.String("string"),
	Tags: pulumi.StringArray{
		pulumi.String("string"),
	},
	Timeouts: &elasticstack.KibanaSecurityEntityStoreEntityTimeoutsArgs{
		Create: pulumi.String("string"),
		Delete: pulumi.String("string"),
		Read:   pulumi.String("string"),
		Update: pulumi.String("string"),
	},
	Timestamp: pulumi.String("string"),
	User: &elasticstack.KibanaSecurityEntityStoreEntityUserArgs{
		Name: pulumi.String("string"),
		Domains: pulumi.StringArray{
			pulumi.String("string"),
		},
		Emails: pulumi.StringArray{
			pulumi.String("string"),
		},
		FullNames: pulumi.StringArray{
			pulumi.String("string"),
		},
		Hashes: pulumi.StringArray{
			pulumi.String("string"),
		},
		Ids: pulumi.StringArray{
			pulumi.String("string"),
		},
		Risk: &elasticstack.KibanaSecurityEntityStoreEntityUserRiskArgs{
			CalculatedLevel:     pulumi.String("string"),
			CalculatedScore:     pulumi.Float64(0),
			CalculatedScoreNorm: pulumi.Float64(0),
		},
		Roles: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	UserJson: pulumi.String("string"),
})

    resource "elasticstack_kibana_security_entity_store_entity" "kibanaSecurityEntityStoreEntityResource" {
  lifecycle {
    create_before_destroy = true
  }
  entity_id   = "string"
  entity_type = "string"
  host_json   = "string"
  event = {
    action    = "string"
    category  = "string"
    code      = "string"
    dataset   = "string"
    ingested  = "string"
    kind      = "string"
    outcome   = "string"
    provider  = "string"
    reason    = "string"
    reference = "string"
    severity  = "string"
    timezone  = "string"
    type      = "string"
    url       = "string"
  }
  entity = {
    id = "string"
    attributes = {
      asset       = false
      managed     = false
      mfa_enabled = false
      privileged  = false
    }
    behaviors = {
      brute_force_victim = false
      new_country_login  = false
      used_usb_device    = false
    }
    lifecycle = {
      first_seen    = "string"
      last_activity = "string"
      last_seen     = "string"
    }
    name = "string"
    relationships = {
      accessed_frequently_bies = ["string"]
      accesses_frequentlies    = ["string"]
      accesses_infrequentlies  = ["string"]
      communicates_withs       = ["string"]
      dependent_ofs            = ["string"]
      depends_ons              = ["string"]
      owned_bies               = ["string"]
      owns                     = ["string"]
      supervised_bies          = ["string"]
      supervises               = ["string"]
    }
    risk = {
      calculated_level      = "string"
      calculated_score      = 0
      calculated_score_norm = 0
    }
    sources  = ["string"]
    sub_type = "string"
    type     = "string"
  }
  cloud = {
    account_id   = "string"
    account_name = "string"
    project_id   = "string"
    project_name = "string"
    provider     = "string"
    region       = "string"
    service_name = "string"
  }
  entity_json = "string"
  asset_json  = "string"
  kibana_connections {
    api_key      = "string"
    bearer_token = "string"
    ca_certs     = ["string"]
    endpoints    = ["string"]
    insecure     = false
    password     = "string"
    username     = "string"
  }
  event_json = "string"
  force      = false
  host = {
    name          = "string"
    architectures = ["string"]
    domains       = ["string"]
    hostnames     = ["string"]
    ids           = ["string"]
    ips           = ["string"]
    macs          = ["string"]
    os = {
      family   = "string"
      full     = "string"
      kernel   = "string"
      name     = "string"
      platform = "string"
      type     = "string"
      version  = "string"
    }
    risk = {
      calculated_level      = "string"
      calculated_score      = 0
      calculated_score_norm = 0
    }
    types = ["string"]
  }
  cloud_json = "string"
  asset = {
    criticality = "string"
    criticality_feedback = {
      notes  = "string"
      reason = "string"
    }
    owner = {
      department = "string"
      email      = "string"
      ext        = "string"
      name       = "string"
    }
    value = 0
  }
  service = {
    name = "string"
    risk = {
      calculated_level      = "string"
      calculated_score      = 0
      calculated_score_norm = 0
    }
  }
  labels_json = "string"
  orchestrator = {
    cluster_id      = "string"
    cluster_name    = "string"
    cluster_version = "string"
    name            = "string"
    namespace       = "string"
    resource_id     = "string"
    resource_name   = "string"
    resource_type   = "string"
    type            = "string"
  }
  orchestrator_json = "string"
  labels = {
    "string" = "string"
  }
  service_json = "string"
  space_id     = "string"
  tags         = ["string"]
  timeouts = {
    create = "string"
    delete = "string"
    read   = "string"
    update = "string"
  }
  timestamp = "string"
  user = {
    name       = "string"
    domains    = ["string"]
    emails     = ["string"]
    full_names = ["string"]
    hashes     = ["string"]
    ids        = ["string"]
    risk = {
      calculated_level      = "string"
      calculated_score      = 0
      calculated_score_norm = 0
    }
    roles = ["string"]
  }
  user_json = "string"
}

    var kibanaSecurityEntityStoreEntityResource = new KibanaSecurityEntityStoreEntity("kibanaSecurityEntityStoreEntityResource", KibanaSecurityEntityStoreEntityArgs.builder()
    .entityId("string")
    .entityType("string")
    .hostJson("string")
    .event(KibanaSecurityEntityStoreEntityEventArgs.builder()
        .action("string")
        .category("string")
        .code("string")
        .dataset("string")
        .ingested("string")
        .kind("string")
        .outcome("string")
        .provider("string")
        .reason("string")
        .reference("string")
        .severity("string")
        .timezone("string")
        .type("string")
        .url("string")
        .build())
    .entity(KibanaSecurityEntityStoreEntityEntityArgs.builder()
        .id("string")
        .attributes(KibanaSecurityEntityStoreEntityEntityAttributesArgs.builder()
            .asset(false)
            .managed(false)
            .mfaEnabled(false)
            .privileged(false)
            .build())
        .behaviors(KibanaSecurityEntityStoreEntityEntityBehaviorsArgs.builder()
            .bruteForceVictim(false)
            .newCountryLogin(false)
            .usedUsbDevice(false)
            .build())
        .lifecycle(KibanaSecurityEntityStoreEntityEntityLifecycleArgs.builder()
            .firstSeen("string")
            .lastActivity("string")
            .lastSeen("string")
            .build())
        .name("string")
        .relationships(KibanaSecurityEntityStoreEntityEntityRelationshipsArgs.builder()
            .accessedFrequentlyBies("string")
            .accessesFrequentlies("string")
            .accessesInfrequentlies("string")
            .communicatesWiths("string")
            .dependentOfs("string")
            .dependsOns("string")
            .ownedBies("string")
            .owns("string")
            .supervisedBies("string")
            .supervises("string")
            .build())
        .risk(KibanaSecurityEntityStoreEntityEntityRiskArgs.builder()
            .calculatedLevel("string")
            .calculatedScore(0.0)
            .calculatedScoreNorm(0.0)
            .build())
        .sources("string")
        .subType("string")
        .type("string")
        .build())
    .cloud(KibanaSecurityEntityStoreEntityCloudArgs.builder()
        .accountId("string")
        .accountName("string")
        .projectId("string")
        .projectName("string")
        .provider("string")
        .region("string")
        .serviceName("string")
        .build())
    .entityJson("string")
    .assetJson("string")
    .kibanaConnections(KibanaSecurityEntityStoreEntityKibanaConnectionArgs.builder()
        .apiKey("string")
        .bearerToken("string")
        .caCerts("string")
        .endpoints("string")
        .insecure(false)
        .password("string")
        .username("string")
        .build())
    .eventJson("string")
    .force(false)
    .host(KibanaSecurityEntityStoreEntityHostArgs.builder()
        .name("string")
        .architectures("string")
        .domains("string")
        .hostnames("string")
        .ids("string")
        .ips("string")
        .macs("string")
        .os(KibanaSecurityEntityStoreEntityHostOsArgs.builder()
            .family("string")
            .full("string")
            .kernel("string")
            .name("string")
            .platform("string")
            .type("string")
            .version("string")
            .build())
        .risk(KibanaSecurityEntityStoreEntityHostRiskArgs.builder()
            .calculatedLevel("string")
            .calculatedScore(0.0)
            .calculatedScoreNorm(0.0)
            .build())
        .types("string")
        .build())
    .cloudJson("string")
    .asset(KibanaSecurityEntityStoreEntityAssetArgs.builder()
        .criticality("string")
        .criticalityFeedback(KibanaSecurityEntityStoreEntityAssetCriticalityFeedbackArgs.builder()
            .notes("string")
            .reason("string")
            .build())
        .owner(KibanaSecurityEntityStoreEntityAssetOwnerArgs.builder()
            .department("string")
            .email("string")
            .ext("string")
            .name("string")
            .build())
        .value(0.0)
        .build())
    .service(KibanaSecurityEntityStoreEntityServiceArgs.builder()
        .name("string")
        .risk(KibanaSecurityEntityStoreEntityServiceRiskArgs.builder()
            .calculatedLevel("string")
            .calculatedScore(0.0)
            .calculatedScoreNorm(0.0)
            .build())
        .build())
    .labelsJson("string")
    .orchestrator(KibanaSecurityEntityStoreEntityOrchestratorArgs.builder()
        .clusterId("string")
        .clusterName("string")
        .clusterVersion("string")
        .name("string")
        .namespace("string")
        .resourceId("string")
        .resourceName("string")
        .resourceType("string")
        .type("string")
        .build())
    .orchestratorJson("string")
    .labels(Map.of("string", "string"))
    .serviceJson("string")
    .spaceId("string")
    .tags("string")
    .timeouts(KibanaSecurityEntityStoreEntityTimeoutsArgs.builder()
        .create("string")
        .delete("string")
        .read("string")
        .update("string")
        .build())
    .timestamp("string")
    .user(KibanaSecurityEntityStoreEntityUserArgs.builder()
        .name("string")
        .domains("string")
        .emails("string")
        .fullNames("string")
        .hashes("string")
        .ids("string")
        .risk(KibanaSecurityEntityStoreEntityUserRiskArgs.builder()
            .calculatedLevel("string")
            .calculatedScore(0.0)
            .calculatedScoreNorm(0.0)
            .build())
        .roles("string")
        .build())
    .userJson("string")
    .build());

    kibana_security_entity_store_entity_resource = elasticstack.KibanaSecurityEntityStoreEntity("kibanaSecurityEntityStoreEntityResource",
    entity_id="string",
    entity_type="string",
    host_json="string",
    event={
        "action": "string",
        "category": "string",
        "code": "string",
        "dataset": "string",
        "ingested": "string",
        "kind": "string",
        "outcome": "string",
        "provider": "string",
        "reason": "string",
        "reference": "string",
        "severity": "string",
        "timezone": "string",
        "type": "string",
        "url": "string",
    },
    entity={
        "id": "string",
        "attributes": {
            "asset": False,
            "managed": False,
            "mfa_enabled": False,
            "privileged": False,
        },
        "behaviors": {
            "brute_force_victim": False,
            "new_country_login": False,
            "used_usb_device": False,
        },
        "lifecycle": {
            "first_seen": "string",
            "last_activity": "string",
            "last_seen": "string",
        },
        "name": "string",
        "relationships": {
            "accessed_frequently_bies": ["string"],
            "accesses_frequentlies": ["string"],
            "accesses_infrequentlies": ["string"],
            "communicates_withs": ["string"],
            "dependent_ofs": ["string"],
            "depends_ons": ["string"],
            "owned_bies": ["string"],
            "owns": ["string"],
            "supervised_bies": ["string"],
            "supervises": ["string"],
        },
        "risk": {
            "calculated_level": "string",
            "calculated_score": float(0),
            "calculated_score_norm": float(0),
        },
        "sources": ["string"],
        "sub_type": "string",
        "type": "string",
    },
    cloud={
        "account_id": "string",
        "account_name": "string",
        "project_id": "string",
        "project_name": "string",
        "provider": "string",
        "region": "string",
        "service_name": "string",
    },
    entity_json="string",
    asset_json="string",
    kibana_connections=[{
        "api_key": "string",
        "bearer_token": "string",
        "ca_certs": ["string"],
        "endpoints": ["string"],
        "insecure": False,
        "password": "string",
        "username": "string",
    }],
    event_json="string",
    force=False,
    host={
        "name": "string",
        "architectures": ["string"],
        "domains": ["string"],
        "hostnames": ["string"],
        "ids": ["string"],
        "ips": ["string"],
        "macs": ["string"],
        "os": {
            "family": "string",
            "full": "string",
            "kernel": "string",
            "name": "string",
            "platform": "string",
            "type": "string",
            "version": "string",
        },
        "risk": {
            "calculated_level": "string",
            "calculated_score": float(0),
            "calculated_score_norm": float(0),
        },
        "types": ["string"],
    },
    cloud_json="string",
    asset={
        "criticality": "string",
        "criticality_feedback": {
            "notes": "string",
            "reason": "string",
        },
        "owner": {
            "department": "string",
            "email": "string",
            "ext": "string",
            "name": "string",
        },
        "value": float(0),
    },
    service={
        "name": "string",
        "risk": {
            "calculated_level": "string",
            "calculated_score": float(0),
            "calculated_score_norm": float(0),
        },
    },
    labels_json="string",
    orchestrator={
        "cluster_id": "string",
        "cluster_name": "string",
        "cluster_version": "string",
        "name": "string",
        "namespace": "string",
        "resource_id": "string",
        "resource_name": "string",
        "resource_type": "string",
        "type": "string",
    },
    orchestrator_json="string",
    labels={
        "string": "string",
    },
    service_json="string",
    space_id="string",
    tags=["string"],
    timeouts={
        "create": "string",
        "delete": "string",
        "read": "string",
        "update": "string",
    },
    timestamp="string",
    user={
        "name": "string",
        "domains": ["string"],
        "emails": ["string"],
        "full_names": ["string"],
        "hashes": ["string"],
        "ids": ["string"],
        "risk": {
            "calculated_level": "string",
            "calculated_score": float(0),
            "calculated_score_norm": float(0),
        },
        "roles": ["string"],
    },
    user_json="string")

    const kibanaSecurityEntityStoreEntityResource = new elasticstack.KibanaSecurityEntityStoreEntity("kibanaSecurityEntityStoreEntityResource", {
    entityId: "string",
    entityType: "string",
    hostJson: "string",
    event: {
        action: "string",
        category: "string",
        code: "string",
        dataset: "string",
        ingested: "string",
        kind: "string",
        outcome: "string",
        provider: "string",
        reason: "string",
        reference: "string",
        severity: "string",
        timezone: "string",
        type: "string",
        url: "string",
    },
    entity: {
        id: "string",
        attributes: {
            asset: false,
            managed: false,
            mfaEnabled: false,
            privileged: false,
        },
        behaviors: {
            bruteForceVictim: false,
            newCountryLogin: false,
            usedUsbDevice: false,
        },
        lifecycle: {
            firstSeen: "string",
            lastActivity: "string",
            lastSeen: "string",
        },
        name: "string",
        relationships: {
            accessedFrequentlyBies: ["string"],
            accessesFrequentlies: ["string"],
            accessesInfrequentlies: ["string"],
            communicatesWiths: ["string"],
            dependentOfs: ["string"],
            dependsOns: ["string"],
            ownedBies: ["string"],
            owns: ["string"],
            supervisedBies: ["string"],
            supervises: ["string"],
        },
        risk: {
            calculatedLevel: "string",
            calculatedScore: 0,
            calculatedScoreNorm: 0,
        },
        sources: ["string"],
        subType: "string",
        type: "string",
    },
    cloud: {
        accountId: "string",
        accountName: "string",
        projectId: "string",
        projectName: "string",
        provider: "string",
        region: "string",
        serviceName: "string",
    },
    entityJson: "string",
    assetJson: "string",
    kibanaConnections: [{
        apiKey: "string",
        bearerToken: "string",
        caCerts: ["string"],
        endpoints: ["string"],
        insecure: false,
        password: "string",
        username: "string",
    }],
    eventJson: "string",
    force: false,
    host: {
        name: "string",
        architectures: ["string"],
        domains: ["string"],
        hostnames: ["string"],
        ids: ["string"],
        ips: ["string"],
        macs: ["string"],
        os: {
            family: "string",
            full: "string",
            kernel: "string",
            name: "string",
            platform: "string",
            type: "string",
            version: "string",
        },
        risk: {
            calculatedLevel: "string",
            calculatedScore: 0,
            calculatedScoreNorm: 0,
        },
        types: ["string"],
    },
    cloudJson: "string",
    asset: {
        criticality: "string",
        criticalityFeedback: {
            notes: "string",
            reason: "string",
        },
        owner: {
            department: "string",
            email: "string",
            ext: "string",
            name: "string",
        },
        value: 0,
    },
    service: {
        name: "string",
        risk: {
            calculatedLevel: "string",
            calculatedScore: 0,
            calculatedScoreNorm: 0,
        },
    },
    labelsJson: "string",
    orchestrator: {
        clusterId: "string",
        clusterName: "string",
        clusterVersion: "string",
        name: "string",
        namespace: "string",
        resourceId: "string",
        resourceName: "string",
        resourceType: "string",
        type: "string",
    },
    orchestratorJson: "string",
    labels: {
        string: "string",
    },
    serviceJson: "string",
    spaceId: "string",
    tags: ["string"],
    timeouts: {
        create: "string",
        "delete": "string",
        read: "string",
        update: "string",
    },
    timestamp: "string",
    user: {
        name: "string",
        domains: ["string"],
        emails: ["string"],
        fullNames: ["string"],
        hashes: ["string"],
        ids: ["string"],
        risk: {
            calculatedLevel: "string",
            calculatedScore: 0,
            calculatedScoreNorm: 0,
        },
        roles: ["string"],
    },
    userJson: "string",
});

    type: elasticstack:KibanaSecurityEntityStoreEntity
properties:
    asset:
        criticality: string
        criticalityFeedback:
            notes: string
            reason: string
        owner:
            department: string
            email: string
            ext: string
            name: string
        value: 0
    assetJson: string
    cloud:
        accountId: string
        accountName: string
        projectId: string
        projectName: string
        provider: string
        region: string
        serviceName: string
    cloudJson: string
    entity:
        attributes:
            asset: false
            managed: false
            mfaEnabled: false
            privileged: false
        behaviors:
            bruteForceVictim: false
            newCountryLogin: false
            usedUsbDevice: false
        id: string
        lifecycle:
            firstSeen: string
            lastActivity: string
            lastSeen: string
        name: string
        relationships:
            accessedFrequentlyBies:
                - string
            accessesFrequentlies:
                - string
            accessesInfrequentlies:
                - string
            communicatesWiths:
                - string
            dependentOfs:
                - string
            dependsOns:
                - string
            ownedBies:
                - string
            owns:
                - string
            supervisedBies:
                - string
            supervises:
                - string
        risk:
            calculatedLevel: string
            calculatedScore: 0
            calculatedScoreNorm: 0
        sources:
            - string
        subType: string
        type: string
    entityId: string
    entityJson: string
    entityType: string
    event:
        action: string
        category: string
        code: string
        dataset: string
        ingested: string
        kind: string
        outcome: string
        provider: string
        reason: string
        reference: string
        severity: string
        timezone: string
        type: string
        url: string
    eventJson: string
    force: false
    host:
        architectures:
            - string
        domains:
            - string
        hostnames:
            - string
        ids:
            - string
        ips:
            - string
        macs:
            - string
        name: string
        os:
            family: string
            full: string
            kernel: string
            name: string
            platform: string
            type: string
            version: string
        risk:
            calculatedLevel: string
            calculatedScore: 0
            calculatedScoreNorm: 0
        types:
            - string
    hostJson: string
    kibanaConnections:
        - apiKey: string
          bearerToken: string
          caCerts:
            - string
          endpoints:
            - string
          insecure: false
          password: string
          username: string
    labels:
        string: string
    labelsJson: string
    orchestrator:
        clusterId: string
        clusterName: string
        clusterVersion: string
        name: string
        namespace: string
        resourceId: string
        resourceName: string
        resourceType: string
        type: string
    orchestratorJson: string
    service:
        name: string
        risk:
            calculatedLevel: string
            calculatedScore: 0
            calculatedScoreNorm: 0
    serviceJson: string
    spaceId: string
    tags:
        - string
    timeouts:
        create: string
        delete: string
        read: string
        update: string
    timestamp: string
    user:
        domains:
            - string
        emails:
            - string
        fullNames:
            - string
        hashes:
            - string
        ids:
            - string
        name: string
        risk:
            calculatedLevel: string
            calculatedScore: 0
            calculatedScoreNorm: 0
        roles:
            - string
    userJson: string

    KibanaSecurityEntityStoreEntity Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The KibanaSecurityEntityStoreEntity resource accepts the following input properties:

    EntityId string
    Unique identifier for this entity. Must match the entity.id field in the typed entity block or entity_json when supplied.
    EntityType string
    The type of entity. Must be one of: user, host, service, generic.
    Asset KibanaSecurityEntityStoreEntityAsset
    Asset metadata associated with the entity.
    AssetJson string
    JSON fallback for the asset block.
    Cloud KibanaSecurityEntityStoreEntityCloud
    Cloud fields collected on the entity.
    CloudJson string
    JSON fallback for the cloud block.
    Entity KibanaSecurityEntityStoreEntityEntity
    Core entity fields shared across all entity types.
    EntityJson string
    JSON fallback for the entity block.
    Event KibanaSecurityEntityStoreEntityEvent
    Event fields collected on the entity.
    EventJson string
    JSON fallback for the event block.
    Force bool
    When true, passes force=true on PUT updates.
    Host KibanaSecurityEntityStoreEntityHost
    ECS host fields collected on the entity.
    HostJson string
    JSON fallback for the host block.
    KibanaConnections List<KibanaSecurityEntityStoreEntityKibanaConnection>
    Kibana connection configuration block.
    Labels Dictionary<string, string>
    Labels associated with the entity as a map of string to string.
    LabelsJson string
    JSON fallback for labels. Supports non-string values.
    Orchestrator KibanaSecurityEntityStoreEntityOrchestrator
    Orchestrator fields collected on the entity.
    OrchestratorJson string
    JSON fallback for the orchestrator block.
    Service KibanaSecurityEntityStoreEntityService
    ECS service fields collected on the entity.
    ServiceJson string
    JSON fallback for the service block.
    SpaceId string
    An identifier for the space. If space_id is not provided, the default space is used.
    Tags List<string>
    Tags associated with the entity.
    Timeouts KibanaSecurityEntityStoreEntityTimeouts
    Timestamp string
    The time the entity record was last updated. Maps to @timestamp in the API body.
    User KibanaSecurityEntityStoreEntityUser
    ECS user fields collected on the entity.
    UserJson string
    JSON fallback for the user block.
    EntityId string
    Unique identifier for this entity. Must match the entity.id field in the typed entity block or entity_json when supplied.
    EntityType string
    The type of entity. Must be one of: user, host, service, generic.
    Asset KibanaSecurityEntityStoreEntityAssetArgs
    Asset metadata associated with the entity.
    AssetJson string
    JSON fallback for the asset block.
    Cloud KibanaSecurityEntityStoreEntityCloudArgs
    Cloud fields collected on the entity.
    CloudJson string
    JSON fallback for the cloud block.
    Entity KibanaSecurityEntityStoreEntityEntityArgs
    Core entity fields shared across all entity types.
    EntityJson string
    JSON fallback for the entity block.
    Event KibanaSecurityEntityStoreEntityEventArgs
    Event fields collected on the entity.
    EventJson string
    JSON fallback for the event block.
    Force bool
    When true, passes force=true on PUT updates.
    Host KibanaSecurityEntityStoreEntityHostArgs
    ECS host fields collected on the entity.
    HostJson string
    JSON fallback for the host block.
    KibanaConnections []KibanaSecurityEntityStoreEntityKibanaConnectionArgs
    Kibana connection configuration block.
    Labels map[string]string
    Labels associated with the entity as a map of string to string.
    LabelsJson string
    JSON fallback for labels. Supports non-string values.
    Orchestrator KibanaSecurityEntityStoreEntityOrchestratorArgs
    Orchestrator fields collected on the entity.
    OrchestratorJson string
    JSON fallback for the orchestrator block.
    Service KibanaSecurityEntityStoreEntityServiceArgs
    ECS service fields collected on the entity.
    ServiceJson string
    JSON fallback for the service block.
    SpaceId string
    An identifier for the space. If space_id is not provided, the default space is used.
    Tags []string
    Tags associated with the entity.
    Timeouts KibanaSecurityEntityStoreEntityTimeoutsArgs
    Timestamp string
    The time the entity record was last updated. Maps to @timestamp in the API body.
    User KibanaSecurityEntityStoreEntityUserArgs
    ECS user fields collected on the entity.
    UserJson string
    JSON fallback for the user block.
    entity_id string
    Unique identifier for this entity. Must match the entity.id field in the typed entity block or entity_json when supplied.
    entity_type string
    The type of entity. Must be one of: user, host, service, generic.
    asset object
    Asset metadata associated with the entity.
    asset_json string
    JSON fallback for the asset block.
    cloud object
    Cloud fields collected on the entity.
    cloud_json string
    JSON fallback for the cloud block.
    entity object
    Core entity fields shared across all entity types.
    entity_json string
    JSON fallback for the entity block.
    event object
    Event fields collected on the entity.
    event_json string
    JSON fallback for the event block.
    force bool
    When true, passes force=true on PUT updates.
    host object
    ECS host fields collected on the entity.
    host_json string
    JSON fallback for the host block.
    kibana_connections list(object)
    Kibana connection configuration block.
    labels map(string)
    Labels associated with the entity as a map of string to string.
    labels_json string
    JSON fallback for labels. Supports non-string values.
    orchestrator object
    Orchestrator fields collected on the entity.
    orchestrator_json string
    JSON fallback for the orchestrator block.
    service object
    ECS service fields collected on the entity.
    service_json string
    JSON fallback for the service block.
    space_id string
    An identifier for the space. If space_id is not provided, the default space is used.
    tags list(string)
    Tags associated with the entity.
    timeouts object
    timestamp string
    The time the entity record was last updated. Maps to @timestamp in the API body.
    user object
    ECS user fields collected on the entity.
    user_json string
    JSON fallback for the user block.
    entityId String
    Unique identifier for this entity. Must match the entity.id field in the typed entity block or entity_json when supplied.
    entityType String
    The type of entity. Must be one of: user, host, service, generic.
    asset KibanaSecurityEntityStoreEntityAsset
    Asset metadata associated with the entity.
    assetJson String
    JSON fallback for the asset block.
    cloud KibanaSecurityEntityStoreEntityCloud
    Cloud fields collected on the entity.
    cloudJson String
    JSON fallback for the cloud block.
    entity KibanaSecurityEntityStoreEntityEntity
    Core entity fields shared across all entity types.
    entityJson String
    JSON fallback for the entity block.
    event KibanaSecurityEntityStoreEntityEvent
    Event fields collected on the entity.
    eventJson String
    JSON fallback for the event block.
    force Boolean
    When true, passes force=true on PUT updates.
    host KibanaSecurityEntityStoreEntityHost
    ECS host fields collected on the entity.
    hostJson String
    JSON fallback for the host block.
    kibanaConnections List<KibanaSecurityEntityStoreEntityKibanaConnection>
    Kibana connection configuration block.
    labels Map<String,String>
    Labels associated with the entity as a map of string to string.
    labelsJson String
    JSON fallback for labels. Supports non-string values.
    orchestrator KibanaSecurityEntityStoreEntityOrchestrator
    Orchestrator fields collected on the entity.
    orchestratorJson String
    JSON fallback for the orchestrator block.
    service KibanaSecurityEntityStoreEntityService
    ECS service fields collected on the entity.
    serviceJson String
    JSON fallback for the service block.
    spaceId String
    An identifier for the space. If space_id is not provided, the default space is used.
    tags List<String>
    Tags associated with the entity.
    timeouts KibanaSecurityEntityStoreEntityTimeouts
    timestamp String
    The time the entity record was last updated. Maps to @timestamp in the API body.
    user KibanaSecurityEntityStoreEntityUser
    ECS user fields collected on the entity.
    userJson String
    JSON fallback for the user block.
    entityId string
    Unique identifier for this entity. Must match the entity.id field in the typed entity block or entity_json when supplied.
    entityType string
    The type of entity. Must be one of: user, host, service, generic.
    asset KibanaSecurityEntityStoreEntityAsset
    Asset metadata associated with the entity.
    assetJson string
    JSON fallback for the asset block.
    cloud KibanaSecurityEntityStoreEntityCloud
    Cloud fields collected on the entity.
    cloudJson string
    JSON fallback for the cloud block.
    entity KibanaSecurityEntityStoreEntityEntity
    Core entity fields shared across all entity types.
    entityJson string
    JSON fallback for the entity block.
    event KibanaSecurityEntityStoreEntityEvent
    Event fields collected on the entity.
    eventJson string
    JSON fallback for the event block.
    force boolean
    When true, passes force=true on PUT updates.
    host KibanaSecurityEntityStoreEntityHost
    ECS host fields collected on the entity.
    hostJson string
    JSON fallback for the host block.
    kibanaConnections KibanaSecurityEntityStoreEntityKibanaConnection[]
    Kibana connection configuration block.
    labels {[key: string]: string}
    Labels associated with the entity as a map of string to string.
    labelsJson string
    JSON fallback for labels. Supports non-string values.
    orchestrator KibanaSecurityEntityStoreEntityOrchestrator
    Orchestrator fields collected on the entity.
    orchestratorJson string
    JSON fallback for the orchestrator block.
    service KibanaSecurityEntityStoreEntityService
    ECS service fields collected on the entity.
    serviceJson string
    JSON fallback for the service block.
    spaceId string
    An identifier for the space. If space_id is not provided, the default space is used.
    tags string[]
    Tags associated with the entity.
    timeouts KibanaSecurityEntityStoreEntityTimeouts
    timestamp string
    The time the entity record was last updated. Maps to @timestamp in the API body.
    user KibanaSecurityEntityStoreEntityUser
    ECS user fields collected on the entity.
    userJson string
    JSON fallback for the user block.
    entity_id str
    Unique identifier for this entity. Must match the entity.id field in the typed entity block or entity_json when supplied.
    entity_type str
    The type of entity. Must be one of: user, host, service, generic.
    asset KibanaSecurityEntityStoreEntityAssetArgs
    Asset metadata associated with the entity.
    asset_json str
    JSON fallback for the asset block.
    cloud KibanaSecurityEntityStoreEntityCloudArgs
    Cloud fields collected on the entity.
    cloud_json str
    JSON fallback for the cloud block.
    entity KibanaSecurityEntityStoreEntityEntityArgs
    Core entity fields shared across all entity types.
    entity_json str
    JSON fallback for the entity block.
    event KibanaSecurityEntityStoreEntityEventArgs
    Event fields collected on the entity.
    event_json str
    JSON fallback for the event block.
    force bool
    When true, passes force=true on PUT updates.
    host KibanaSecurityEntityStoreEntityHostArgs
    ECS host fields collected on the entity.
    host_json str
    JSON fallback for the host block.
    kibana_connections Sequence[KibanaSecurityEntityStoreEntityKibanaConnectionArgs]
    Kibana connection configuration block.
    labels Mapping[str, str]
    Labels associated with the entity as a map of string to string.
    labels_json str
    JSON fallback for labels. Supports non-string values.
    orchestrator KibanaSecurityEntityStoreEntityOrchestratorArgs
    Orchestrator fields collected on the entity.
    orchestrator_json str
    JSON fallback for the orchestrator block.
    service KibanaSecurityEntityStoreEntityServiceArgs
    ECS service fields collected on the entity.
    service_json str
    JSON fallback for the service block.
    space_id str
    An identifier for the space. If space_id is not provided, the default space is used.
    tags Sequence[str]
    Tags associated with the entity.
    timeouts KibanaSecurityEntityStoreEntityTimeoutsArgs
    timestamp str
    The time the entity record was last updated. Maps to @timestamp in the API body.
    user KibanaSecurityEntityStoreEntityUserArgs
    ECS user fields collected on the entity.
    user_json str
    JSON fallback for the user block.
    entityId String
    Unique identifier for this entity. Must match the entity.id field in the typed entity block or entity_json when supplied.
    entityType String
    The type of entity. Must be one of: user, host, service, generic.
    asset Property Map
    Asset metadata associated with the entity.
    assetJson String
    JSON fallback for the asset block.
    cloud Property Map
    Cloud fields collected on the entity.
    cloudJson String
    JSON fallback for the cloud block.
    entity Property Map
    Core entity fields shared across all entity types.
    entityJson String
    JSON fallback for the entity block.
    event Property Map
    Event fields collected on the entity.
    eventJson String
    JSON fallback for the event block.
    force Boolean
    When true, passes force=true on PUT updates.
    host Property Map
    ECS host fields collected on the entity.
    hostJson String
    JSON fallback for the host block.
    kibanaConnections List<Property Map>
    Kibana connection configuration block.
    labels Map<String>
    Labels associated with the entity as a map of string to string.
    labelsJson String
    JSON fallback for labels. Supports non-string values.
    orchestrator Property Map
    Orchestrator fields collected on the entity.
    orchestratorJson String
    JSON fallback for the orchestrator block.
    service Property Map
    ECS service fields collected on the entity.
    serviceJson String
    JSON fallback for the service block.
    spaceId String
    An identifier for the space. If space_id is not provided, the default space is used.
    tags List<String>
    Tags associated with the entity.
    timeouts Property Map
    timestamp String
    The time the entity record was last updated. Maps to @timestamp in the API body.
    user Property Map
    ECS user fields collected on the entity.
    userJson String
    JSON fallback for the user block.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the KibanaSecurityEntityStoreEntity resource produces the following output properties:

    DocumentJson string
    Canonical JSON (sorted keys) containing the full entity document as read back from Kibana.
    Id string
    The provider-assigned unique ID for this managed resource.
    ResponseJson string
    Raw API response body serialized as normalized JSON for troubleshooting.
    DocumentJson string
    Canonical JSON (sorted keys) containing the full entity document as read back from Kibana.
    Id string
    The provider-assigned unique ID for this managed resource.
    ResponseJson string
    Raw API response body serialized as normalized JSON for troubleshooting.
    document_json string
    Canonical JSON (sorted keys) containing the full entity document as read back from Kibana.
    id string
    The provider-assigned unique ID for this managed resource.
    response_json string
    Raw API response body serialized as normalized JSON for troubleshooting.
    documentJson String
    Canonical JSON (sorted keys) containing the full entity document as read back from Kibana.
    id String
    The provider-assigned unique ID for this managed resource.
    responseJson String
    Raw API response body serialized as normalized JSON for troubleshooting.
    documentJson string
    Canonical JSON (sorted keys) containing the full entity document as read back from Kibana.
    id string
    The provider-assigned unique ID for this managed resource.
    responseJson string
    Raw API response body serialized as normalized JSON for troubleshooting.
    document_json str
    Canonical JSON (sorted keys) containing the full entity document as read back from Kibana.
    id str
    The provider-assigned unique ID for this managed resource.
    response_json str
    Raw API response body serialized as normalized JSON for troubleshooting.
    documentJson String
    Canonical JSON (sorted keys) containing the full entity document as read back from Kibana.
    id String
    The provider-assigned unique ID for this managed resource.
    responseJson String
    Raw API response body serialized as normalized JSON for troubleshooting.

    Look up Existing KibanaSecurityEntityStoreEntity Resource

    Get an existing KibanaSecurityEntityStoreEntity resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: KibanaSecurityEntityStoreEntityState, opts?: CustomResourceOptions): KibanaSecurityEntityStoreEntity
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        asset: Optional[KibanaSecurityEntityStoreEntityAssetArgs] = None,
        asset_json: Optional[str] = None,
        cloud: Optional[KibanaSecurityEntityStoreEntityCloudArgs] = None,
        cloud_json: Optional[str] = None,
        document_json: Optional[str] = None,
        entity: Optional[KibanaSecurityEntityStoreEntityEntityArgs] = None,
        entity_id: Optional[str] = None,
        entity_json: Optional[str] = None,
        entity_type: Optional[str] = None,
        event: Optional[KibanaSecurityEntityStoreEntityEventArgs] = None,
        event_json: Optional[str] = None,
        force: Optional[bool] = None,
        host: Optional[KibanaSecurityEntityStoreEntityHostArgs] = None,
        host_json: Optional[str] = None,
        kibana_connections: Optional[Sequence[KibanaSecurityEntityStoreEntityKibanaConnectionArgs]] = None,
        labels: Optional[Mapping[str, str]] = None,
        labels_json: Optional[str] = None,
        orchestrator: Optional[KibanaSecurityEntityStoreEntityOrchestratorArgs] = None,
        orchestrator_json: Optional[str] = None,
        response_json: Optional[str] = None,
        service: Optional[KibanaSecurityEntityStoreEntityServiceArgs] = None,
        service_json: Optional[str] = None,
        space_id: Optional[str] = None,
        tags: Optional[Sequence[str]] = None,
        timeouts: Optional[KibanaSecurityEntityStoreEntityTimeoutsArgs] = None,
        timestamp: Optional[str] = None,
        user: Optional[KibanaSecurityEntityStoreEntityUserArgs] = None,
        user_json: Optional[str] = None) -> KibanaSecurityEntityStoreEntity
    func GetKibanaSecurityEntityStoreEntity(ctx *Context, name string, id IDInput, state *KibanaSecurityEntityStoreEntityState, opts ...ResourceOption) (*KibanaSecurityEntityStoreEntity, error)
    public static KibanaSecurityEntityStoreEntity Get(string name, Input<string> id, KibanaSecurityEntityStoreEntityState? state, CustomResourceOptions? opts = null)
    public static KibanaSecurityEntityStoreEntity get(String name, Output<String> id, KibanaSecurityEntityStoreEntityState state, CustomResourceOptions options)
    resources:  _:    type: elasticstack:KibanaSecurityEntityStoreEntity    get:      id: ${id}
    import {
  to = elasticstack_kibana_security_entity_store_entity.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Asset KibanaSecurityEntityStoreEntityAsset
    Asset metadata associated with the entity.
    AssetJson string
    JSON fallback for the asset block.
    Cloud KibanaSecurityEntityStoreEntityCloud
    Cloud fields collected on the entity.
    CloudJson string
    JSON fallback for the cloud block.
    DocumentJson string
    Canonical JSON (sorted keys) containing the full entity document as read back from Kibana.
    Entity KibanaSecurityEntityStoreEntityEntity
    Core entity fields shared across all entity types.
    EntityId string
    Unique identifier for this entity. Must match the entity.id field in the typed entity block or entity_json when supplied.
    EntityJson string
    JSON fallback for the entity block.
    EntityType string
    The type of entity. Must be one of: user, host, service, generic.
    Event KibanaSecurityEntityStoreEntityEvent
    Event fields collected on the entity.
    EventJson string
    JSON fallback for the event block.
    Force bool
    When true, passes force=true on PUT updates.
    Host KibanaSecurityEntityStoreEntityHost
    ECS host fields collected on the entity.
    HostJson string
    JSON fallback for the host block.
    KibanaConnections List<KibanaSecurityEntityStoreEntityKibanaConnection>
    Kibana connection configuration block.
    Labels Dictionary<string, string>
    Labels associated with the entity as a map of string to string.
    LabelsJson string
    JSON fallback for labels. Supports non-string values.
    Orchestrator KibanaSecurityEntityStoreEntityOrchestrator
    Orchestrator fields collected on the entity.
    OrchestratorJson string
    JSON fallback for the orchestrator block.
    ResponseJson string
    Raw API response body serialized as normalized JSON for troubleshooting.
    Service KibanaSecurityEntityStoreEntityService
    ECS service fields collected on the entity.
    ServiceJson string
    JSON fallback for the service block.
    SpaceId string
    An identifier for the space. If space_id is not provided, the default space is used.
    Tags List<string>
    Tags associated with the entity.
    Timeouts KibanaSecurityEntityStoreEntityTimeouts
    Timestamp string
    The time the entity record was last updated. Maps to @timestamp in the API body.
    User KibanaSecurityEntityStoreEntityUser
    ECS user fields collected on the entity.
    UserJson string
    JSON fallback for the user block.
    Asset KibanaSecurityEntityStoreEntityAssetArgs
    Asset metadata associated with the entity.
    AssetJson string
    JSON fallback for the asset block.
    Cloud KibanaSecurityEntityStoreEntityCloudArgs
    Cloud fields collected on the entity.
    CloudJson string
    JSON fallback for the cloud block.
    DocumentJson string
    Canonical JSON (sorted keys) containing the full entity document as read back from Kibana.
    Entity KibanaSecurityEntityStoreEntityEntityArgs
    Core entity fields shared across all entity types.
    EntityId string
    Unique identifier for this entity. Must match the entity.id field in the typed entity block or entity_json when supplied.
    EntityJson string
    JSON fallback for the entity block.
    EntityType string
    The type of entity. Must be one of: user, host, service, generic.
    Event KibanaSecurityEntityStoreEntityEventArgs
    Event fields collected on the entity.
    EventJson string
    JSON fallback for the event block.
    Force bool
    When true, passes force=true on PUT updates.
    Host KibanaSecurityEntityStoreEntityHostArgs
    ECS host fields collected on the entity.
    HostJson string
    JSON fallback for the host block.
    KibanaConnections []KibanaSecurityEntityStoreEntityKibanaConnectionArgs
    Kibana connection configuration block.
    Labels map[string]string
    Labels associated with the entity as a map of string to string.
    LabelsJson string
    JSON fallback for labels. Supports non-string values.
    Orchestrator KibanaSecurityEntityStoreEntityOrchestratorArgs
    Orchestrator fields collected on the entity.
    OrchestratorJson string
    JSON fallback for the orchestrator block.
    ResponseJson string
    Raw API response body serialized as normalized JSON for troubleshooting.
    Service KibanaSecurityEntityStoreEntityServiceArgs
    ECS service fields collected on the entity.
    ServiceJson string
    JSON fallback for the service block.
    SpaceId string
    An identifier for the space. If space_id is not provided, the default space is used.
    Tags []string
    Tags associated with the entity.
    Timeouts KibanaSecurityEntityStoreEntityTimeoutsArgs
    Timestamp string
    The time the entity record was last updated. Maps to @timestamp in the API body.
    User KibanaSecurityEntityStoreEntityUserArgs
    ECS user fields collected on the entity.
    UserJson string
    JSON fallback for the user block.
    asset object
    Asset metadata associated with the entity.
    asset_json string
    JSON fallback for the asset block.
    cloud object
    Cloud fields collected on the entity.
    cloud_json string
    JSON fallback for the cloud block.
    document_json string
    Canonical JSON (sorted keys) containing the full entity document as read back from Kibana.
    entity object
    Core entity fields shared across all entity types.
    entity_id string
    Unique identifier for this entity. Must match the entity.id field in the typed entity block or entity_json when supplied.
    entity_json string
    JSON fallback for the entity block.
    entity_type string
    The type of entity. Must be one of: user, host, service, generic.
    event object
    Event fields collected on the entity.
    event_json string
    JSON fallback for the event block.
    force bool
    When true, passes force=true on PUT updates.
    host object
    ECS host fields collected on the entity.
    host_json string
    JSON fallback for the host block.
    kibana_connections list(object)
    Kibana connection configuration block.
    labels map(string)
    Labels associated with the entity as a map of string to string.
    labels_json string
    JSON fallback for labels. Supports non-string values.
    orchestrator object
    Orchestrator fields collected on the entity.
    orchestrator_json string
    JSON fallback for the orchestrator block.
    response_json string
    Raw API response body serialized as normalized JSON for troubleshooting.
    service object
    ECS service fields collected on the entity.
    service_json string
    JSON fallback for the service block.
    space_id string
    An identifier for the space. If space_id is not provided, the default space is used.
    tags list(string)
    Tags associated with the entity.
    timeouts object
    timestamp string
    The time the entity record was last updated. Maps to @timestamp in the API body.
    user object
    ECS user fields collected on the entity.
    user_json string
    JSON fallback for the user block.
    asset KibanaSecurityEntityStoreEntityAsset
    Asset metadata associated with the entity.
    assetJson String
    JSON fallback for the asset block.
    cloud KibanaSecurityEntityStoreEntityCloud
    Cloud fields collected on the entity.
    cloudJson String
    JSON fallback for the cloud block.
    documentJson String
    Canonical JSON (sorted keys) containing the full entity document as read back from Kibana.
    entity KibanaSecurityEntityStoreEntityEntity
    Core entity fields shared across all entity types.
    entityId String
    Unique identifier for this entity. Must match the entity.id field in the typed entity block or entity_json when supplied.
    entityJson String
    JSON fallback for the entity block.
    entityType String
    The type of entity. Must be one of: user, host, service, generic.
    event KibanaSecurityEntityStoreEntityEvent
    Event fields collected on the entity.
    eventJson String
    JSON fallback for the event block.
    force Boolean
    When true, passes force=true on PUT updates.
    host KibanaSecurityEntityStoreEntityHost
    ECS host fields collected on the entity.
    hostJson String
    JSON fallback for the host block.
    kibanaConnections List<KibanaSecurityEntityStoreEntityKibanaConnection>
    Kibana connection configuration block.
    labels Map<String,String>
    Labels associated with the entity as a map of string to string.
    labelsJson String
    JSON fallback for labels. Supports non-string values.
    orchestrator KibanaSecurityEntityStoreEntityOrchestrator
    Orchestrator fields collected on the entity.
    orchestratorJson String
    JSON fallback for the orchestrator block.
    responseJson String
    Raw API response body serialized as normalized JSON for troubleshooting.
    service KibanaSecurityEntityStoreEntityService
    ECS service fields collected on the entity.
    serviceJson String
    JSON fallback for the service block.
    spaceId String
    An identifier for the space. If space_id is not provided, the default space is used.
    tags List<String>
    Tags associated with the entity.
    timeouts KibanaSecurityEntityStoreEntityTimeouts
    timestamp String
    The time the entity record was last updated. Maps to @timestamp in the API body.
    user KibanaSecurityEntityStoreEntityUser
    ECS user fields collected on the entity.
    userJson String
    JSON fallback for the user block.
    asset KibanaSecurityEntityStoreEntityAsset
    Asset metadata associated with the entity.
    assetJson string
    JSON fallback for the asset block.
    cloud KibanaSecurityEntityStoreEntityCloud
    Cloud fields collected on the entity.
    cloudJson string
    JSON fallback for the cloud block.
    documentJson string
    Canonical JSON (sorted keys) containing the full entity document as read back from Kibana.
    entity KibanaSecurityEntityStoreEntityEntity
    Core entity fields shared across all entity types.
    entityId string
    Unique identifier for this entity. Must match the entity.id field in the typed entity block or entity_json when supplied.
    entityJson string
    JSON fallback for the entity block.
    entityType string
    The type of entity. Must be one of: user, host, service, generic.
    event KibanaSecurityEntityStoreEntityEvent
    Event fields collected on the entity.
    eventJson string
    JSON fallback for the event block.
    force boolean
    When true, passes force=true on PUT updates.
    host KibanaSecurityEntityStoreEntityHost
    ECS host fields collected on the entity.
    hostJson string
    JSON fallback for the host block.
    kibanaConnections KibanaSecurityEntityStoreEntityKibanaConnection[]
    Kibana connection configuration block.
    labels {[key: string]: string}
    Labels associated with the entity as a map of string to string.
    labelsJson string
    JSON fallback for labels. Supports non-string values.
    orchestrator KibanaSecurityEntityStoreEntityOrchestrator
    Orchestrator fields collected on the entity.
    orchestratorJson string
    JSON fallback for the orchestrator block.
    responseJson string
    Raw API response body serialized as normalized JSON for troubleshooting.
    service KibanaSecurityEntityStoreEntityService
    ECS service fields collected on the entity.
    serviceJson string
    JSON fallback for the service block.
    spaceId string
    An identifier for the space. If space_id is not provided, the default space is used.
    tags string[]
    Tags associated with the entity.
    timeouts KibanaSecurityEntityStoreEntityTimeouts
    timestamp string
    The time the entity record was last updated. Maps to @timestamp in the API body.
    user KibanaSecurityEntityStoreEntityUser
    ECS user fields collected on the entity.
    userJson string
    JSON fallback for the user block.
    asset KibanaSecurityEntityStoreEntityAssetArgs
    Asset metadata associated with the entity.
    asset_json str
    JSON fallback for the asset block.
    cloud KibanaSecurityEntityStoreEntityCloudArgs
    Cloud fields collected on the entity.
    cloud_json str
    JSON fallback for the cloud block.
    document_json str
    Canonical JSON (sorted keys) containing the full entity document as read back from Kibana.
    entity KibanaSecurityEntityStoreEntityEntityArgs
    Core entity fields shared across all entity types.
    entity_id str
    Unique identifier for this entity. Must match the entity.id field in the typed entity block or entity_json when supplied.
    entity_json str
    JSON fallback for the entity block.
    entity_type str
    The type of entity. Must be one of: user, host, service, generic.
    event KibanaSecurityEntityStoreEntityEventArgs
    Event fields collected on the entity.
    event_json str
    JSON fallback for the event block.
    force bool
    When true, passes force=true on PUT updates.
    host KibanaSecurityEntityStoreEntityHostArgs
    ECS host fields collected on the entity.
    host_json str
    JSON fallback for the host block.
    kibana_connections Sequence[KibanaSecurityEntityStoreEntityKibanaConnectionArgs]
    Kibana connection configuration block.
    labels Mapping[str, str]
    Labels associated with the entity as a map of string to string.
    labels_json str
    JSON fallback for labels. Supports non-string values.
    orchestrator KibanaSecurityEntityStoreEntityOrchestratorArgs
    Orchestrator fields collected on the entity.
    orchestrator_json str
    JSON fallback for the orchestrator block.
    response_json str
    Raw API response body serialized as normalized JSON for troubleshooting.
    service KibanaSecurityEntityStoreEntityServiceArgs
    ECS service fields collected on the entity.
    service_json str
    JSON fallback for the service block.
    space_id str
    An identifier for the space. If space_id is not provided, the default space is used.
    tags Sequence[str]
    Tags associated with the entity.
    timeouts KibanaSecurityEntityStoreEntityTimeoutsArgs
    timestamp str
    The time the entity record was last updated. Maps to @timestamp in the API body.
    user KibanaSecurityEntityStoreEntityUserArgs
    ECS user fields collected on the entity.
    user_json str
    JSON fallback for the user block.
    asset Property Map
    Asset metadata associated with the entity.
    assetJson String
    JSON fallback for the asset block.
    cloud Property Map
    Cloud fields collected on the entity.
    cloudJson String
    JSON fallback for the cloud block.
    documentJson String
    Canonical JSON (sorted keys) containing the full entity document as read back from Kibana.
    entity Property Map
    Core entity fields shared across all entity types.
    entityId String
    Unique identifier for this entity. Must match the entity.id field in the typed entity block or entity_json when supplied.
    entityJson String
    JSON fallback for the entity block.
    entityType String
    The type of entity. Must be one of: user, host, service, generic.
    event Property Map
    Event fields collected on the entity.
    eventJson String
    JSON fallback for the event block.
    force Boolean
    When true, passes force=true on PUT updates.
    host Property Map
    ECS host fields collected on the entity.
    hostJson String
    JSON fallback for the host block.
    kibanaConnections List<Property Map>
    Kibana connection configuration block.
    labels Map<String>
    Labels associated with the entity as a map of string to string.
    labelsJson String
    JSON fallback for labels. Supports non-string values.
    orchestrator Property Map
    Orchestrator fields collected on the entity.
    orchestratorJson String
    JSON fallback for the orchestrator block.
    responseJson String
    Raw API response body serialized as normalized JSON for troubleshooting.
    service Property Map
    ECS service fields collected on the entity.
    serviceJson String
    JSON fallback for the service block.
    spaceId String
    An identifier for the space. If space_id is not provided, the default space is used.
    tags List<String>
    Tags associated with the entity.
    timeouts Property Map
    timestamp String
    The time the entity record was last updated. Maps to @timestamp in the API body.
    user Property Map
    ECS user fields collected on the entity.
    userJson String
    JSON fallback for the user block.

    Supporting Types

    KibanaSecurityEntityStoreEntityAsset, KibanaSecurityEntityStoreEntityAssetArgs

    Criticality string
    Asset criticality level.
    CriticalityFeedback KibanaSecurityEntityStoreEntityAssetCriticalityFeedback
    Feedback on the asset criticality.
    Owner KibanaSecurityEntityStoreEntityAssetOwner
    Asset owner information.
    Value double
    Asset value.
    Criticality string
    Asset criticality level.
    CriticalityFeedback KibanaSecurityEntityStoreEntityAssetCriticalityFeedback
    Feedback on the asset criticality.
    Owner KibanaSecurityEntityStoreEntityAssetOwner
    Asset owner information.
    Value float64
    Asset value.
    criticality string
    Asset criticality level.
    criticality_feedback object
    Feedback on the asset criticality.
    owner object
    Asset owner information.
    value number
    Asset value.
    criticality String
    Asset criticality level.
    criticalityFeedback KibanaSecurityEntityStoreEntityAssetCriticalityFeedback
    Feedback on the asset criticality.
    owner KibanaSecurityEntityStoreEntityAssetOwner
    Asset owner information.
    value Double
    Asset value.
    criticality string
    Asset criticality level.
    criticalityFeedback KibanaSecurityEntityStoreEntityAssetCriticalityFeedback
    Feedback on the asset criticality.
    owner KibanaSecurityEntityStoreEntityAssetOwner
    Asset owner information.
    value number
    Asset value.
    criticality str
    Asset criticality level.
    criticality_feedback KibanaSecurityEntityStoreEntityAssetCriticalityFeedback
    Feedback on the asset criticality.
    owner KibanaSecurityEntityStoreEntityAssetOwner
    Asset owner information.
    value float
    Asset value.
    criticality String
    Asset criticality level.
    criticalityFeedback Property Map
    Feedback on the asset criticality.
    owner Property Map
    Asset owner information.
    value Number
    Asset value.

    KibanaSecurityEntityStoreEntityAssetCriticalityFeedback, KibanaSecurityEntityStoreEntityAssetCriticalityFeedbackArgs

    Notes string
    Feedback notes.
    Reason string
    Feedback reason.
    Notes string
    Feedback notes.
    Reason string
    Feedback reason.
    notes string
    Feedback notes.
    reason string
    Feedback reason.
    notes String
    Feedback notes.
    reason String
    Feedback reason.
    notes string
    Feedback notes.
    reason string
    Feedback reason.
    notes str
    Feedback notes.
    reason str
    Feedback reason.
    notes String
    Feedback notes.
    reason String
    Feedback reason.

    KibanaSecurityEntityStoreEntityAssetOwner, KibanaSecurityEntityStoreEntityAssetOwnerArgs

    Department string
    Owner department.
    Email string
    Owner email.
    Ext string
    Owner extension.
    Name string
    Owner name.
    Department string
    Owner department.
    Email string
    Owner email.
    Ext string
    Owner extension.
    Name string
    Owner name.
    department string
    Owner department.
    email string
    Owner email.
    ext string
    Owner extension.
    name string
    Owner name.
    department String
    Owner department.
    email String
    Owner email.
    ext String
    Owner extension.
    name String
    Owner name.
    department string
    Owner department.
    email string
    Owner email.
    ext string
    Owner extension.
    name string
    Owner name.
    department str
    Owner department.
    email str
    Owner email.
    ext str
    Owner extension.
    name str
    Owner name.
    department String
    Owner department.
    email String
    Owner email.
    ext String
    Owner extension.
    name String
    Owner name.

    KibanaSecurityEntityStoreEntityCloud, KibanaSecurityEntityStoreEntityCloudArgs

    AccountId string
    Cloud account identifier.
    AccountName string
    Cloud account name.
    ProjectId string
    Cloud project identifier.
    ProjectName string
    Cloud project name.
    Provider string
    Cloud provider.
    Region string
    Cloud region.
    ServiceName string
    Cloud service name.
    AccountId string
    Cloud account identifier.
    AccountName string
    Cloud account name.
    ProjectId string
    Cloud project identifier.
    ProjectName string
    Cloud project name.
    Provider string
    Cloud provider.
    Region string
    Cloud region.
    ServiceName string
    Cloud service name.
    account_id string
    Cloud account identifier.
    account_name string
    Cloud account name.
    project_id string
    Cloud project identifier.
    project_name string
    Cloud project name.
    provider string
    Cloud provider.
    region string
    Cloud region.
    service_name string
    Cloud service name.
    accountId String
    Cloud account identifier.
    accountName String
    Cloud account name.
    projectId String
    Cloud project identifier.
    projectName String
    Cloud project name.
    provider String
    Cloud provider.
    region String
    Cloud region.
    serviceName String
    Cloud service name.
    accountId string
    Cloud account identifier.
    accountName string
    Cloud account name.
    projectId string
    Cloud project identifier.
    projectName string
    Cloud project name.
    provider string
    Cloud provider.
    region string
    Cloud region.
    serviceName string
    Cloud service name.
    account_id str
    Cloud account identifier.
    account_name str
    Cloud account name.
    project_id str
    Cloud project identifier.
    project_name str
    Cloud project name.
    provider str
    Cloud provider.
    region str
    Cloud region.
    service_name str
    Cloud service name.
    accountId String
    Cloud account identifier.
    accountName String
    Cloud account name.
    projectId String
    Cloud project identifier.
    projectName String
    Cloud project name.
    provider String
    Cloud provider.
    region String
    Cloud region.
    serviceName String
    Cloud service name.

    KibanaSecurityEntityStoreEntityEntity, KibanaSecurityEntityStoreEntityEntityArgs

    Id string
    Unique identifier for this entity.
    Attributes KibanaSecurityEntityStoreEntityEntityAttributes
    Boolean flags describing characteristics of the entity.
    Behaviors KibanaSecurityEntityStoreEntityEntityBehaviors
    Boolean flags indicating observed behavioral signals.
    Lifecycle KibanaSecurityEntityStoreEntityEntityLifecycle
    Timestamps tracking the entity lifecycle.
    Name string
    Human-readable name of the entity.
    Relationships KibanaSecurityEntityStoreEntityEntityRelationships
    Connections between this entity and other entities.
    Risk KibanaSecurityEntityStoreEntityEntityRisk
    Risk scoring information for the entity.
    Sources List<string>
    The sources that produced this entity record.
    SubType string
    Optional sub-type classification for the entity.
    Type string
    The entity type.
    Id string
    Unique identifier for this entity.
    Attributes KibanaSecurityEntityStoreEntityEntityAttributes
    Boolean flags describing characteristics of the entity.
    Behaviors KibanaSecurityEntityStoreEntityEntityBehaviors
    Boolean flags indicating observed behavioral signals.
    Lifecycle KibanaSecurityEntityStoreEntityEntityLifecycle
    Timestamps tracking the entity lifecycle.
    Name string
    Human-readable name of the entity.
    Relationships KibanaSecurityEntityStoreEntityEntityRelationships
    Connections between this entity and other entities.
    Risk KibanaSecurityEntityStoreEntityEntityRisk
    Risk scoring information for the entity.
    Sources []string
    The sources that produced this entity record.
    SubType string
    Optional sub-type classification for the entity.
    Type string
    The entity type.
    id string
    Unique identifier for this entity.
    attributes object
    Boolean flags describing characteristics of the entity.
    behaviors object
    Boolean flags indicating observed behavioral signals.
    lifecycle object
    Timestamps tracking the entity lifecycle.
    name string
    Human-readable name of the entity.
    relationships object
    Connections between this entity and other entities.
    risk object
    Risk scoring information for the entity.
    sources list(string)
    The sources that produced this entity record.
    sub_type string
    Optional sub-type classification for the entity.
    type string
    The entity type.
    id String
    Unique identifier for this entity.
    attributes KibanaSecurityEntityStoreEntityEntityAttributes
    Boolean flags describing characteristics of the entity.
    behaviors KibanaSecurityEntityStoreEntityEntityBehaviors
    Boolean flags indicating observed behavioral signals.
    lifecycle KibanaSecurityEntityStoreEntityEntityLifecycle
    Timestamps tracking the entity lifecycle.
    name String
    Human-readable name of the entity.
    relationships KibanaSecurityEntityStoreEntityEntityRelationships
    Connections between this entity and other entities.
    risk KibanaSecurityEntityStoreEntityEntityRisk
    Risk scoring information for the entity.
    sources List<String>
    The sources that produced this entity record.
    subType String
    Optional sub-type classification for the entity.
    type String
    The entity type.
    id string
    Unique identifier for this entity.
    attributes KibanaSecurityEntityStoreEntityEntityAttributes
    Boolean flags describing characteristics of the entity.
    behaviors KibanaSecurityEntityStoreEntityEntityBehaviors
    Boolean flags indicating observed behavioral signals.
    lifecycle KibanaSecurityEntityStoreEntityEntityLifecycle
    Timestamps tracking the entity lifecycle.
    name string
    Human-readable name of the entity.
    relationships KibanaSecurityEntityStoreEntityEntityRelationships
    Connections between this entity and other entities.
    risk KibanaSecurityEntityStoreEntityEntityRisk
    Risk scoring information for the entity.
    sources string[]
    The sources that produced this entity record.
    subType string
    Optional sub-type classification for the entity.
    type string
    The entity type.
    id str
    Unique identifier for this entity.
    attributes KibanaSecurityEntityStoreEntityEntityAttributes
    Boolean flags describing characteristics of the entity.
    behaviors KibanaSecurityEntityStoreEntityEntityBehaviors
    Boolean flags indicating observed behavioral signals.
    lifecycle KibanaSecurityEntityStoreEntityEntityLifecycle
    Timestamps tracking the entity lifecycle.
    name str
    Human-readable name of the entity.
    relationships KibanaSecurityEntityStoreEntityEntityRelationships
    Connections between this entity and other entities.
    risk KibanaSecurityEntityStoreEntityEntityRisk
    Risk scoring information for the entity.
    sources Sequence[str]
    The sources that produced this entity record.
    sub_type str
    Optional sub-type classification for the entity.
    type str
    The entity type.
    id String
    Unique identifier for this entity.
    attributes Property Map
    Boolean flags describing characteristics of the entity.
    behaviors Property Map
    Boolean flags indicating observed behavioral signals.
    lifecycle Property Map
    Timestamps tracking the entity lifecycle.
    name String
    Human-readable name of the entity.
    relationships Property Map
    Connections between this entity and other entities.
    risk Property Map
    Risk scoring information for the entity.
    sources List<String>
    The sources that produced this entity record.
    subType String
    Optional sub-type classification for the entity.
    type String
    The entity type.

    KibanaSecurityEntityStoreEntityEntityAttributes, KibanaSecurityEntityStoreEntityEntityAttributesArgs

    Asset bool
    Whether the entity is classified as an asset.
    Managed bool
    Whether the entity is managed (for example, via a directory service).
    MfaEnabled bool
    Whether multi-factor authentication is enabled for the entity.
    Privileged bool
    Whether the entity has elevated privileges.
    Asset bool
    Whether the entity is classified as an asset.
    Managed bool
    Whether the entity is managed (for example, via a directory service).
    MfaEnabled bool
    Whether multi-factor authentication is enabled for the entity.
    Privileged bool
    Whether the entity has elevated privileges.
    asset bool
    Whether the entity is classified as an asset.
    managed bool
    Whether the entity is managed (for example, via a directory service).
    mfa_enabled bool
    Whether multi-factor authentication is enabled for the entity.
    privileged bool
    Whether the entity has elevated privileges.
    asset Boolean
    Whether the entity is classified as an asset.
    managed Boolean
    Whether the entity is managed (for example, via a directory service).
    mfaEnabled Boolean
    Whether multi-factor authentication is enabled for the entity.
    privileged Boolean
    Whether the entity has elevated privileges.
    asset boolean
    Whether the entity is classified as an asset.
    managed boolean
    Whether the entity is managed (for example, via a directory service).
    mfaEnabled boolean
    Whether multi-factor authentication is enabled for the entity.
    privileged boolean
    Whether the entity has elevated privileges.
    asset bool
    Whether the entity is classified as an asset.
    managed bool
    Whether the entity is managed (for example, via a directory service).
    mfa_enabled bool
    Whether multi-factor authentication is enabled for the entity.
    privileged bool
    Whether the entity has elevated privileges.
    asset Boolean
    Whether the entity is classified as an asset.
    managed Boolean
    Whether the entity is managed (for example, via a directory service).
    mfaEnabled Boolean
    Whether multi-factor authentication is enabled for the entity.
    privileged Boolean
    Whether the entity has elevated privileges.

    KibanaSecurityEntityStoreEntityEntityBehaviors, KibanaSecurityEntityStoreEntityEntityBehaviorsArgs

    BruteForceVictim bool
    Whether the entity has been targeted by brute-force attacks.
    NewCountryLogin bool
    Whether the entity has logged in from a new country.
    UsedUsbDevice bool
    Whether the entity has used a USB device.
    BruteForceVictim bool
    Whether the entity has been targeted by brute-force attacks.
    NewCountryLogin bool
    Whether the entity has logged in from a new country.
    UsedUsbDevice bool
    Whether the entity has used a USB device.
    brute_force_victim bool
    Whether the entity has been targeted by brute-force attacks.
    new_country_login bool
    Whether the entity has logged in from a new country.
    used_usb_device bool
    Whether the entity has used a USB device.
    bruteForceVictim Boolean
    Whether the entity has been targeted by brute-force attacks.
    newCountryLogin Boolean
    Whether the entity has logged in from a new country.
    usedUsbDevice Boolean
    Whether the entity has used a USB device.
    bruteForceVictim boolean
    Whether the entity has been targeted by brute-force attacks.
    newCountryLogin boolean
    Whether the entity has logged in from a new country.
    usedUsbDevice boolean
    Whether the entity has used a USB device.
    brute_force_victim bool
    Whether the entity has been targeted by brute-force attacks.
    new_country_login bool
    Whether the entity has logged in from a new country.
    used_usb_device bool
    Whether the entity has used a USB device.
    bruteForceVictim Boolean
    Whether the entity has been targeted by brute-force attacks.
    newCountryLogin Boolean
    Whether the entity has logged in from a new country.
    usedUsbDevice Boolean
    Whether the entity has used a USB device.

    KibanaSecurityEntityStoreEntityEntityLifecycle, KibanaSecurityEntityStoreEntityEntityLifecycleArgs

    FirstSeen string
    When the entity was first observed.
    LastActivity string
    When the entity last generated activity.
    LastSeen string
    When the entity was last observed.
    FirstSeen string
    When the entity was first observed.
    LastActivity string
    When the entity last generated activity.
    LastSeen string
    When the entity was last observed.
    first_seen string
    When the entity was first observed.
    last_activity string
    When the entity last generated activity.
    last_seen string
    When the entity was last observed.
    firstSeen String
    When the entity was first observed.
    lastActivity String
    When the entity last generated activity.
    lastSeen String
    When the entity was last observed.
    firstSeen string
    When the entity was first observed.
    lastActivity string
    When the entity last generated activity.
    lastSeen string
    When the entity was last observed.
    first_seen str
    When the entity was first observed.
    last_activity str
    When the entity last generated activity.
    last_seen str
    When the entity was last observed.
    firstSeen String
    When the entity was first observed.
    lastActivity String
    When the entity last generated activity.
    lastSeen String
    When the entity was last observed.

    KibanaSecurityEntityStoreEntityEntityRelationships, KibanaSecurityEntityStoreEntityEntityRelationshipsArgs

    AccessedFrequentlyBies List<string>
    Entity IDs that frequently access this entity.
    AccessesFrequentlies List<string>
    Entity IDs this entity accesses frequently.
    AccessesInfrequentlies List<string>
    Entity IDs this entity accesses infrequently.
    CommunicatesWiths List<string>
    Entity IDs this entity communicates with.
    DependentOfs List<string>
    Entity IDs that depend on this entity.
    DependsOns List<string>
    Entity IDs this entity depends on.
    OwnedBies List<string>
    Entity IDs that own this entity.
    Owns List<string>
    Entity IDs owned by this entity.
    SupervisedBies List<string>
    Entity IDs that supervise this entity.
    Supervises List<string>
    Entity IDs supervised by this entity.
    AccessedFrequentlyBies []string
    Entity IDs that frequently access this entity.
    AccessesFrequentlies []string
    Entity IDs this entity accesses frequently.
    AccessesInfrequentlies []string
    Entity IDs this entity accesses infrequently.
    CommunicatesWiths []string
    Entity IDs this entity communicates with.
    DependentOfs []string
    Entity IDs that depend on this entity.
    DependsOns []string
    Entity IDs this entity depends on.
    OwnedBies []string
    Entity IDs that own this entity.
    Owns []string
    Entity IDs owned by this entity.
    SupervisedBies []string
    Entity IDs that supervise this entity.
    Supervises []string
    Entity IDs supervised by this entity.
    accessed_frequently_bies list(string)
    Entity IDs that frequently access this entity.
    accesses_frequentlies list(string)
    Entity IDs this entity accesses frequently.
    accesses_infrequentlies list(string)
    Entity IDs this entity accesses infrequently.
    communicates_withs list(string)
    Entity IDs this entity communicates with.
    dependent_ofs list(string)
    Entity IDs that depend on this entity.
    depends_ons list(string)
    Entity IDs this entity depends on.
    owned_bies list(string)
    Entity IDs that own this entity.
    owns list(string)
    Entity IDs owned by this entity.
    supervised_bies list(string)
    Entity IDs that supervise this entity.
    supervises list(string)
    Entity IDs supervised by this entity.
    accessedFrequentlyBies List<String>
    Entity IDs that frequently access this entity.
    accessesFrequentlies List<String>
    Entity IDs this entity accesses frequently.
    accessesInfrequentlies List<String>
    Entity IDs this entity accesses infrequently.
    communicatesWiths List<String>
    Entity IDs this entity communicates with.
    dependentOfs List<String>
    Entity IDs that depend on this entity.
    dependsOns List<String>
    Entity IDs this entity depends on.
    ownedBies List<String>
    Entity IDs that own this entity.
    owns List<String>
    Entity IDs owned by this entity.
    supervisedBies List<String>
    Entity IDs that supervise this entity.
    supervises List<String>
    Entity IDs supervised by this entity.
    accessedFrequentlyBies string[]
    Entity IDs that frequently access this entity.
    accessesFrequentlies string[]
    Entity IDs this entity accesses frequently.
    accessesInfrequentlies string[]
    Entity IDs this entity accesses infrequently.
    communicatesWiths string[]
    Entity IDs this entity communicates with.
    dependentOfs string[]
    Entity IDs that depend on this entity.
    dependsOns string[]
    Entity IDs this entity depends on.
    ownedBies string[]
    Entity IDs that own this entity.
    owns string[]
    Entity IDs owned by this entity.
    supervisedBies string[]
    Entity IDs that supervise this entity.
    supervises string[]
    Entity IDs supervised by this entity.
    accessed_frequently_bies Sequence[str]
    Entity IDs that frequently access this entity.
    accesses_frequentlies Sequence[str]
    Entity IDs this entity accesses frequently.
    accesses_infrequentlies Sequence[str]
    Entity IDs this entity accesses infrequently.
    communicates_withs Sequence[str]
    Entity IDs this entity communicates with.
    dependent_ofs Sequence[str]
    Entity IDs that depend on this entity.
    depends_ons Sequence[str]
    Entity IDs this entity depends on.
    owned_bies Sequence[str]
    Entity IDs that own this entity.
    owns Sequence[str]
    Entity IDs owned by this entity.
    supervised_bies Sequence[str]
    Entity IDs that supervise this entity.
    supervises Sequence[str]
    Entity IDs supervised by this entity.
    accessedFrequentlyBies List<String>
    Entity IDs that frequently access this entity.
    accessesFrequentlies List<String>
    Entity IDs this entity accesses frequently.
    accessesInfrequentlies List<String>
    Entity IDs this entity accesses infrequently.
    communicatesWiths List<String>
    Entity IDs this entity communicates with.
    dependentOfs List<String>
    Entity IDs that depend on this entity.
    dependsOns List<String>
    Entity IDs this entity depends on.
    ownedBies List<String>
    Entity IDs that own this entity.
    owns List<String>
    Entity IDs owned by this entity.
    supervisedBies List<String>
    Entity IDs that supervise this entity.
    supervises List<String>
    Entity IDs supervised by this entity.

    KibanaSecurityEntityStoreEntityEntityRisk, KibanaSecurityEntityStoreEntityEntityRiskArgs

    CalculatedLevel string
    The calculated risk level.
    CalculatedScore double
    The raw numeric value of the given entity's risk score.
    CalculatedScoreNorm double
    The normalized numeric value of the given entity's risk score.
    CalculatedLevel string
    The calculated risk level.
    CalculatedScore float64
    The raw numeric value of the given entity's risk score.
    CalculatedScoreNorm float64
    The normalized numeric value of the given entity's risk score.
    calculated_level string
    The calculated risk level.
    calculated_score number
    The raw numeric value of the given entity's risk score.
    calculated_score_norm number
    The normalized numeric value of the given entity's risk score.
    calculatedLevel String
    The calculated risk level.
    calculatedScore Double
    The raw numeric value of the given entity's risk score.
    calculatedScoreNorm Double
    The normalized numeric value of the given entity's risk score.
    calculatedLevel string
    The calculated risk level.
    calculatedScore number
    The raw numeric value of the given entity's risk score.
    calculatedScoreNorm number
    The normalized numeric value of the given entity's risk score.
    calculated_level str
    The calculated risk level.
    calculated_score float
    The raw numeric value of the given entity's risk score.
    calculated_score_norm float
    The normalized numeric value of the given entity's risk score.
    calculatedLevel String
    The calculated risk level.
    calculatedScore Number
    The raw numeric value of the given entity's risk score.
    calculatedScoreNorm Number
    The normalized numeric value of the given entity's risk score.

    KibanaSecurityEntityStoreEntityEvent, KibanaSecurityEntityStoreEntityEventArgs

    Action string
    Event action.
    Category string
    Event category.
    Code string
    Event code.
    Dataset string
    Event dataset.
    Ingested string
    When the event was ingested into Elasticsearch.
    Kind string
    Event kind.
    Outcome string
    Event outcome.
    Provider string
    Event provider.
    Reason string
    Event reason.
    Reference string
    Event reference.
    Severity string
    Event severity.
    Timezone string
    Event timezone.
    Type string
    Event type.
    Url string
    Event URL.
    Action string
    Event action.
    Category string
    Event category.
    Code string
    Event code.
    Dataset string
    Event dataset.
    Ingested string
    When the event was ingested into Elasticsearch.
    Kind string
    Event kind.
    Outcome string
    Event outcome.
    Provider string
    Event provider.
    Reason string
    Event reason.
    Reference string
    Event reference.
    Severity string
    Event severity.
    Timezone string
    Event timezone.
    Type string
    Event type.
    Url string
    Event URL.
    action string
    Event action.
    category string
    Event category.
    code string
    Event code.
    dataset string
    Event dataset.
    ingested string
    When the event was ingested into Elasticsearch.
    kind string
    Event kind.
    outcome string
    Event outcome.
    provider string
    Event provider.
    reason string
    Event reason.
    reference string
    Event reference.
    severity string
    Event severity.
    timezone string
    Event timezone.
    type string
    Event type.
    url string
    Event URL.
    action String
    Event action.
    category String
    Event category.
    code String
    Event code.
    dataset String
    Event dataset.
    ingested String
    When the event was ingested into Elasticsearch.
    kind String
    Event kind.
    outcome String
    Event outcome.
    provider String
    Event provider.
    reason String
    Event reason.
    reference String
    Event reference.
    severity String
    Event severity.
    timezone String
    Event timezone.
    type String
    Event type.
    url String
    Event URL.
    action string
    Event action.
    category string
    Event category.
    code string
    Event code.
    dataset string
    Event dataset.
    ingested string
    When the event was ingested into Elasticsearch.
    kind string
    Event kind.
    outcome string
    Event outcome.
    provider string
    Event provider.
    reason string
    Event reason.
    reference string
    Event reference.
    severity string
    Event severity.
    timezone string
    Event timezone.
    type string
    Event type.
    url string
    Event URL.
    action str
    Event action.
    category str
    Event category.
    code str
    Event code.
    dataset str
    Event dataset.
    ingested str
    When the event was ingested into Elasticsearch.
    kind str
    Event kind.
    outcome str
    Event outcome.
    provider str
    Event provider.
    reason str
    Event reason.
    reference str
    Event reference.
    severity str
    Event severity.
    timezone str
    Event timezone.
    type str
    Event type.
    url str
    Event URL.
    action String
    Event action.
    category String
    Event category.
    code String
    Event code.
    dataset String
    Event dataset.
    ingested String
    When the event was ingested into Elasticsearch.
    kind String
    Event kind.
    outcome String
    Event outcome.
    provider String
    Event provider.
    reason String
    Event reason.
    reference String
    Event reference.
    severity String
    Event severity.
    timezone String
    Event timezone.
    type String
    Event type.
    url String
    Event URL.

    KibanaSecurityEntityStoreEntityHost, KibanaSecurityEntityStoreEntityHostArgs

    Name string
    Primary host name.
    Architectures List<string>
    Observed CPU architectures.
    Domains List<string>
    Observed host domains.
    Hostnames List<string>
    Observed hostnames.
    Ids List<string>
    Observed host IDs.
    Ips List<string>
    Observed IP addresses.
    Macs List<string>
    Observed MAC addresses.
    Os KibanaSecurityEntityStoreEntityHostOs
    Elastic Common Schema (ECS) host.os fields collected on the entity.
    Risk KibanaSecurityEntityStoreEntityHostRisk
    Risk scoring information for the host.
    Types List<string>
    Observed host types.
    Name string
    Primary host name.
    Architectures []string
    Observed CPU architectures.
    Domains []string
    Observed host domains.
    Hostnames []string
    Observed hostnames.
    Ids []string
    Observed host IDs.
    Ips []string
    Observed IP addresses.
    Macs []string
    Observed MAC addresses.
    Os KibanaSecurityEntityStoreEntityHostOs
    Elastic Common Schema (ECS) host.os fields collected on the entity.
    Risk KibanaSecurityEntityStoreEntityHostRisk
    Risk scoring information for the host.
    Types []string
    Observed host types.
    name string
    Primary host name.
    architectures list(string)
    Observed CPU architectures.
    domains list(string)
    Observed host domains.
    hostnames list(string)
    Observed hostnames.
    ids list(string)
    Observed host IDs.
    ips list(string)
    Observed IP addresses.
    macs list(string)
    Observed MAC addresses.
    os object
    Elastic Common Schema (ECS) host.os fields collected on the entity.
    risk object
    Risk scoring information for the host.
    types list(string)
    Observed host types.
    name String
    Primary host name.
    architectures List<String>
    Observed CPU architectures.
    domains List<String>
    Observed host domains.
    hostnames List<String>
    Observed hostnames.
    ids List<String>
    Observed host IDs.
    ips List<String>
    Observed IP addresses.
    macs List<String>
    Observed MAC addresses.
    os KibanaSecurityEntityStoreEntityHostOs
    Elastic Common Schema (ECS) host.os fields collected on the entity.
    risk KibanaSecurityEntityStoreEntityHostRisk
    Risk scoring information for the host.
    types List<String>
    Observed host types.
    name string
    Primary host name.
    architectures string[]
    Observed CPU architectures.
    domains string[]
    Observed host domains.
    hostnames string[]
    Observed hostnames.
    ids string[]
    Observed host IDs.
    ips string[]
    Observed IP addresses.
    macs string[]
    Observed MAC addresses.
    os KibanaSecurityEntityStoreEntityHostOs
    Elastic Common Schema (ECS) host.os fields collected on the entity.
    risk KibanaSecurityEntityStoreEntityHostRisk
    Risk scoring information for the host.
    types string[]
    Observed host types.
    name str
    Primary host name.
    architectures Sequence[str]
    Observed CPU architectures.
    domains Sequence[str]
    Observed host domains.
    hostnames Sequence[str]
    Observed hostnames.
    ids Sequence[str]
    Observed host IDs.
    ips Sequence[str]
    Observed IP addresses.
    macs Sequence[str]
    Observed MAC addresses.
    os KibanaSecurityEntityStoreEntityHostOs
    Elastic Common Schema (ECS) host.os fields collected on the entity.
    risk KibanaSecurityEntityStoreEntityHostRisk
    Risk scoring information for the host.
    types Sequence[str]
    Observed host types.
    name String
    Primary host name.
    architectures List<String>
    Observed CPU architectures.
    domains List<String>
    Observed host domains.
    hostnames List<String>
    Observed hostnames.
    ids List<String>
    Observed host IDs.
    ips List<String>
    Observed IP addresses.
    macs List<String>
    Observed MAC addresses.
    os Property Map
    Elastic Common Schema (ECS) host.os fields collected on the entity.
    risk Property Map
    Risk scoring information for the host.
    types List<String>
    Observed host types.

    KibanaSecurityEntityStoreEntityHostOs, KibanaSecurityEntityStoreEntityHostOsArgs

    Family string
    Operating system family.
    Full string
    Full operating system name.
    Kernel string
    Kernel version.
    Name string
    Operating system name.
    Platform string
    Operating system platform.
    Type string
    Operating system type.
    Version string
    Operating system version.
    Family string
    Operating system family.
    Full string
    Full operating system name.
    Kernel string
    Kernel version.
    Name string
    Operating system name.
    Platform string
    Operating system platform.
    Type string
    Operating system type.
    Version string
    Operating system version.
    family string
    Operating system family.
    full string
    Full operating system name.
    kernel string
    Kernel version.
    name string
    Operating system name.
    platform string
    Operating system platform.
    type string
    Operating system type.
    version string
    Operating system version.
    family String
    Operating system family.
    full String
    Full operating system name.
    kernel String
    Kernel version.
    name String
    Operating system name.
    platform String
    Operating system platform.
    type String
    Operating system type.
    version String
    Operating system version.
    family string
    Operating system family.
    full string
    Full operating system name.
    kernel string
    Kernel version.
    name string
    Operating system name.
    platform string
    Operating system platform.
    type string
    Operating system type.
    version string
    Operating system version.
    family str
    Operating system family.
    full str
    Full operating system name.
    kernel str
    Kernel version.
    name str
    Operating system name.
    platform str
    Operating system platform.
    type str
    Operating system type.
    version str
    Operating system version.
    family String
    Operating system family.
    full String
    Full operating system name.
    kernel String
    Kernel version.
    name String
    Operating system name.
    platform String
    Operating system platform.
    type String
    Operating system type.
    version String
    Operating system version.

    KibanaSecurityEntityStoreEntityHostRisk, KibanaSecurityEntityStoreEntityHostRiskArgs

    CalculatedLevel string
    The calculated risk level.
    CalculatedScore double
    The raw numeric value of the given entity's risk score.
    CalculatedScoreNorm double
    The normalized numeric value of the given entity's risk score.
    CalculatedLevel string
    The calculated risk level.
    CalculatedScore float64
    The raw numeric value of the given entity's risk score.
    CalculatedScoreNorm float64
    The normalized numeric value of the given entity's risk score.
    calculated_level string
    The calculated risk level.
    calculated_score number
    The raw numeric value of the given entity's risk score.
    calculated_score_norm number
    The normalized numeric value of the given entity's risk score.
    calculatedLevel String
    The calculated risk level.
    calculatedScore Double
    The raw numeric value of the given entity's risk score.
    calculatedScoreNorm Double
    The normalized numeric value of the given entity's risk score.
    calculatedLevel string
    The calculated risk level.
    calculatedScore number
    The raw numeric value of the given entity's risk score.
    calculatedScoreNorm number
    The normalized numeric value of the given entity's risk score.
    calculated_level str
    The calculated risk level.
    calculated_score float
    The raw numeric value of the given entity's risk score.
    calculated_score_norm float
    The normalized numeric value of the given entity's risk score.
    calculatedLevel String
    The calculated risk level.
    calculatedScore Number
    The raw numeric value of the given entity's risk score.
    calculatedScoreNorm Number
    The normalized numeric value of the given entity's risk score.

    KibanaSecurityEntityStoreEntityKibanaConnection, KibanaSecurityEntityStoreEntityKibanaConnectionArgs

    ApiKey string
    API Key to use for authentication to Kibana
    BearerToken string
    Bearer Token to use for authentication to Kibana
    CaCerts List<string>
    A list of paths to CA certificates to validate the certificate presented by the Kibana server.
    Endpoints List<string>
    Insecure bool
    Disable TLS certificate validation
    Password string
    Password to use for API authentication to Kibana.
    Username string
    Username to use for API authentication to Kibana.
    ApiKey string
    API Key to use for authentication to Kibana
    BearerToken string
    Bearer Token to use for authentication to Kibana
    CaCerts []string
    A list of paths to CA certificates to validate the certificate presented by the Kibana server.
    Endpoints []string
    Insecure bool
    Disable TLS certificate validation
    Password string
    Password to use for API authentication to Kibana.
    Username string
    Username to use for API authentication to Kibana.
    api_key string
    API Key to use for authentication to Kibana
    bearer_token string
    Bearer Token to use for authentication to Kibana
    ca_certs list(string)
    A list of paths to CA certificates to validate the certificate presented by the Kibana server.
    endpoints list(string)
    insecure bool
    Disable TLS certificate validation
    password string
    Password to use for API authentication to Kibana.
    username string
    Username to use for API authentication to Kibana.
    apiKey String
    API Key to use for authentication to Kibana
    bearerToken String
    Bearer Token to use for authentication to Kibana
    caCerts List<String>
    A list of paths to CA certificates to validate the certificate presented by the Kibana server.
    endpoints List<String>
    insecure Boolean
    Disable TLS certificate validation
    password String
    Password to use for API authentication to Kibana.
    username String
    Username to use for API authentication to Kibana.
    apiKey string
    API Key to use for authentication to Kibana
    bearerToken string
    Bearer Token to use for authentication to Kibana
    caCerts string[]
    A list of paths to CA certificates to validate the certificate presented by the Kibana server.
    endpoints string[]
    insecure boolean
    Disable TLS certificate validation
    password string
    Password to use for API authentication to Kibana.
    username string
    Username to use for API authentication to Kibana.
    api_key str
    API Key to use for authentication to Kibana
    bearer_token str
    Bearer Token to use for authentication to Kibana
    ca_certs Sequence[str]
    A list of paths to CA certificates to validate the certificate presented by the Kibana server.
    endpoints Sequence[str]
    insecure bool
    Disable TLS certificate validation
    password str
    Password to use for API authentication to Kibana.
    username str
    Username to use for API authentication to Kibana.
    apiKey String
    API Key to use for authentication to Kibana
    bearerToken String
    Bearer Token to use for authentication to Kibana
    caCerts List<String>
    A list of paths to CA certificates to validate the certificate presented by the Kibana server.
    endpoints List<String>
    insecure Boolean
    Disable TLS certificate validation
    password String
    Password to use for API authentication to Kibana.
    username String
    Username to use for API authentication to Kibana.

    KibanaSecurityEntityStoreEntityOrchestrator, KibanaSecurityEntityStoreEntityOrchestratorArgs

    ClusterId string
    Cluster identifier.
    ClusterName string
    Cluster name.
    ClusterVersion string
    Cluster version.
    Name string
    Orchestrator name.
    Namespace string
    Orchestrator namespace.
    ResourceId string
    Resource identifier.
    ResourceName string
    Resource name.
    ResourceType string
    Resource type.
    Type string
    Orchestrator type.
    ClusterId string
    Cluster identifier.
    ClusterName string
    Cluster name.
    ClusterVersion string
    Cluster version.
    Name string
    Orchestrator name.
    Namespace string
    Orchestrator namespace.
    ResourceId string
    Resource identifier.
    ResourceName string
    Resource name.
    ResourceType string
    Resource type.
    Type string
    Orchestrator type.
    cluster_id string
    Cluster identifier.
    cluster_name string
    Cluster name.
    cluster_version string
    Cluster version.
    name string
    Orchestrator name.
    namespace string
    Orchestrator namespace.
    resource_id string
    Resource identifier.
    resource_name string
    Resource name.
    resource_type string
    Resource type.
    type string
    Orchestrator type.
    clusterId String
    Cluster identifier.
    clusterName String
    Cluster name.
    clusterVersion String
    Cluster version.
    name String
    Orchestrator name.
    namespace String
    Orchestrator namespace.
    resourceId String
    Resource identifier.
    resourceName String
    Resource name.
    resourceType String
    Resource type.
    type String
    Orchestrator type.
    clusterId string
    Cluster identifier.
    clusterName string
    Cluster name.
    clusterVersion string
    Cluster version.
    name string
    Orchestrator name.
    namespace string
    Orchestrator namespace.
    resourceId string
    Resource identifier.
    resourceName string
    Resource name.
    resourceType string
    Resource type.
    type string
    Orchestrator type.
    cluster_id str
    Cluster identifier.
    cluster_name str
    Cluster name.
    cluster_version str
    Cluster version.
    name str
    Orchestrator name.
    namespace str
    Orchestrator namespace.
    resource_id str
    Resource identifier.
    resource_name str
    Resource name.
    resource_type str
    Resource type.
    type str
    Orchestrator type.
    clusterId String
    Cluster identifier.
    clusterName String
    Cluster name.
    clusterVersion String
    Cluster version.
    name String
    Orchestrator name.
    namespace String
    Orchestrator namespace.
    resourceId String
    Resource identifier.
    resourceName String
    Resource name.
    resourceType String
    Resource type.
    type String
    Orchestrator type.

    KibanaSecurityEntityStoreEntityService, KibanaSecurityEntityStoreEntityServiceArgs

    Name string
    Primary service name.
    Risk KibanaSecurityEntityStoreEntityServiceRisk
    Risk scoring information for the service.
    Name string
    Primary service name.
    Risk KibanaSecurityEntityStoreEntityServiceRisk
    Risk scoring information for the service.
    name string
    Primary service name.
    risk object
    Risk scoring information for the service.
    name String
    Primary service name.
    risk KibanaSecurityEntityStoreEntityServiceRisk
    Risk scoring information for the service.
    name string
    Primary service name.
    risk KibanaSecurityEntityStoreEntityServiceRisk
    Risk scoring information for the service.
    name str
    Primary service name.
    risk KibanaSecurityEntityStoreEntityServiceRisk
    Risk scoring information for the service.
    name String
    Primary service name.
    risk Property Map
    Risk scoring information for the service.

    KibanaSecurityEntityStoreEntityServiceRisk, KibanaSecurityEntityStoreEntityServiceRiskArgs

    CalculatedLevel string
    The calculated risk level.
    CalculatedScore double
    The raw numeric value of the given entity's risk score.
    CalculatedScoreNorm double
    The normalized numeric value of the given entity's risk score.
    CalculatedLevel string
    The calculated risk level.
    CalculatedScore float64
    The raw numeric value of the given entity's risk score.
    CalculatedScoreNorm float64
    The normalized numeric value of the given entity's risk score.
    calculated_level string
    The calculated risk level.
    calculated_score number
    The raw numeric value of the given entity's risk score.
    calculated_score_norm number
    The normalized numeric value of the given entity's risk score.
    calculatedLevel String
    The calculated risk level.
    calculatedScore Double
    The raw numeric value of the given entity's risk score.
    calculatedScoreNorm Double
    The normalized numeric value of the given entity's risk score.
    calculatedLevel string
    The calculated risk level.
    calculatedScore number
    The raw numeric value of the given entity's risk score.
    calculatedScoreNorm number
    The normalized numeric value of the given entity's risk score.
    calculated_level str
    The calculated risk level.
    calculated_score float
    The raw numeric value of the given entity's risk score.
    calculated_score_norm float
    The normalized numeric value of the given entity's risk score.
    calculatedLevel String
    The calculated risk level.
    calculatedScore Number
    The raw numeric value of the given entity's risk score.
    calculatedScoreNorm Number
    The normalized numeric value of the given entity's risk score.

    KibanaSecurityEntityStoreEntityTimeouts, KibanaSecurityEntityStoreEntityTimeoutsArgs

    Create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    Delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    Read string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    Update string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    Create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    Delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    Read string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    Update string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    read string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    update string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    read String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    update String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    read string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    update string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create str
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete str
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    read str
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    update str
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    read String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
    update String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).

    KibanaSecurityEntityStoreEntityUser, KibanaSecurityEntityStoreEntityUserArgs

    Name string
    Primary user name.
    Domains List<string>
    Observed user domains.
    Emails List<string>
    Observed email addresses.
    FullNames List<string>
    Observed full names of the user.
    Hashes List<string>
    Observed user hashes.
    Ids List<string>
    Observed user IDs.
    Risk KibanaSecurityEntityStoreEntityUserRisk
    Risk scoring information for the user.
    Roles List<string>
    Observed roles assigned to the user.
    Name string
    Primary user name.
    Domains []string
    Observed user domains.
    Emails []string
    Observed email addresses.
    FullNames []string
    Observed full names of the user.
    Hashes []string
    Observed user hashes.
    Ids []string
    Observed user IDs.
    Risk KibanaSecurityEntityStoreEntityUserRisk
    Risk scoring information for the user.
    Roles []string
    Observed roles assigned to the user.
    name string
    Primary user name.
    domains list(string)
    Observed user domains.
    emails list(string)
    Observed email addresses.
    full_names list(string)
    Observed full names of the user.
    hashes list(string)
    Observed user hashes.
    ids list(string)
    Observed user IDs.
    risk object
    Risk scoring information for the user.
    roles list(string)
    Observed roles assigned to the user.
    name String
    Primary user name.
    domains List<String>
    Observed user domains.
    emails List<String>
    Observed email addresses.
    fullNames List<String>
    Observed full names of the user.
    hashes List<String>
    Observed user hashes.
    ids List<String>
    Observed user IDs.
    risk KibanaSecurityEntityStoreEntityUserRisk
    Risk scoring information for the user.
    roles List<String>
    Observed roles assigned to the user.
    name string
    Primary user name.
    domains string[]
    Observed user domains.
    emails string[]
    Observed email addresses.
    fullNames string[]
    Observed full names of the user.
    hashes string[]
    Observed user hashes.
    ids string[]
    Observed user IDs.
    risk KibanaSecurityEntityStoreEntityUserRisk
    Risk scoring information for the user.
    roles string[]
    Observed roles assigned to the user.
    name str
    Primary user name.
    domains Sequence[str]
    Observed user domains.
    emails Sequence[str]
    Observed email addresses.
    full_names Sequence[str]
    Observed full names of the user.
    hashes Sequence[str]
    Observed user hashes.
    ids Sequence[str]
    Observed user IDs.
    risk KibanaSecurityEntityStoreEntityUserRisk
    Risk scoring information for the user.
    roles Sequence[str]
    Observed roles assigned to the user.
    name String
    Primary user name.
    domains List<String>
    Observed user domains.
    emails List<String>
    Observed email addresses.
    fullNames List<String>
    Observed full names of the user.
    hashes List<String>
    Observed user hashes.
    ids List<String>
    Observed user IDs.
    risk Property Map
    Risk scoring information for the user.
    roles List<String>
    Observed roles assigned to the user.

    KibanaSecurityEntityStoreEntityUserRisk, KibanaSecurityEntityStoreEntityUserRiskArgs

    CalculatedLevel string
    The calculated risk level.
    CalculatedScore double
    The raw numeric value of the given entity's risk score.
    CalculatedScoreNorm double
    The normalized numeric value of the given entity's risk score.
    CalculatedLevel string
    The calculated risk level.
    CalculatedScore float64
    The raw numeric value of the given entity's risk score.
    CalculatedScoreNorm float64
    The normalized numeric value of the given entity's risk score.
    calculated_level string
    The calculated risk level.
    calculated_score number
    The raw numeric value of the given entity's risk score.
    calculated_score_norm number
    The normalized numeric value of the given entity's risk score.
    calculatedLevel String
    The calculated risk level.
    calculatedScore Double
    The raw numeric value of the given entity's risk score.
    calculatedScoreNorm Double
    The normalized numeric value of the given entity's risk score.
    calculatedLevel string
    The calculated risk level.
    calculatedScore number
    The raw numeric value of the given entity's risk score.
    calculatedScoreNorm number
    The normalized numeric value of the given entity's risk score.
    calculated_level str
    The calculated risk level.
    calculated_score float
    The raw numeric value of the given entity's risk score.
    calculated_score_norm float
    The normalized numeric value of the given entity's risk score.
    calculatedLevel String
    The calculated risk level.
    calculatedScore Number
    The raw numeric value of the given entity's risk score.
    calculatedScoreNorm Number
    The normalized numeric value of the given entity's risk score.

    Package Details

    Repository
    elasticstack elastic/terraform-provider-elasticstack
    License
    Notes
    This Pulumi package is based on the elasticstack Terraform Provider.
    Viewing docs for elasticstack 0.16.3
    published on Thursday, Jul 23, 2026 by elastic
    Schema (JSON)
    elastic/terraform-provider-elasticstack

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial