GET /api/fleet/epm/data_streams
Api key auth

Spaces method and path for this operation:

get /s/{space_id}/api/fleet/epm/data_streams

Refer to Spaces for more information.

Get a list of data streams created by installed integration packages.

[Required authorization] Route required privileges: integrations-read OR fleet-setup OR fleet-all.

Query parameters

  • type string

    Values are logs, metrics, traces, synthetics, or profiling.

  • datasetQuery string
  • sortOrder string

    Values are asc or desc. Default value is asc.

  • uncategorisedOnly boolean

    Default value is false.

Responses

  • 200 application/json

    Successful response

    Hide response attribute Show response attribute object
    • items array[object] Required

      Not more than 10000 elements.

      Hide items attribute Show items attribute object
      • name string Required
  • 400 application/json

    Bad Request

    Hide response attributes Show response attributes object
    • attributes Required
    • error string
    • errorType string
    • message string Required
    • statusCode number
GET /api/fleet/epm/data_streams 
curl \
 --request GET 'https://<KIBANA_URL>/api/fleet/epm/data_streams' \
 --header "Authorization: $API_KEY"
Response examples (200)
List of data streams from installed packages 
{
  "data_streams": [
    {
      "ilm_policy": "logs-default",
      "index_template": "logs-system.syslog",
      "name": "logs-system.syslog-default",
      "package": "system",
      "package_version": "1.55.0",
      "title": "System syslog logs"
    }
  ]
}
Response examples (400)
Example of a generic error response 
{
  "error": "Bad Request",
  "message": "An error message describing what went wrong",
  "statusCode": 400
}