Streams action steps
Streams action steps operate on Observability Streams from a workflow. Use them to list available streams, fetch a specific stream's configuration, or pull significant events from a stream's time window.
Streams action steps, along with the Streams feature itself, are in technical preview in 9.4. Schemas and semantics can change in future releases. Use these steps for prototypes and investigation workflows; hold off on critical automation until Streams reaches GA.
kibana.streams.list: Enumerate available streams.kibana.streams.get: Fetch a stream by name.kibana.streams.getSignificantEvents: Pull significant events from a stream.
List every available stream in the current Kibana space. This step takes no parameters.
- name: list_streams
type: kibana.streams.list
Fetch a stream by name. The name is the human-readable stream identifier shown in the Kibana UI.
| Parameter | Location | Type | Required | Description |
|---|---|---|---|---|
name |
with |
string | Yes | Stream name. |
- name: get_logs_stream
type: kibana.streams.get
with:
name: "logs-default"
Fetch significant events from a stream in a specified time range, optionally filtered by a query.
| Parameter | Location | Type | Required | Description |
|---|---|---|---|---|
name |
with |
string | Yes | Stream name. |
from |
with |
string | No | Start of the time range. Accepts ISO timestamps (2026-04-01T00:00:00Z) or relative values (now-1h). |
to |
with |
string | No | End of the time range. |
bucketSize |
with |
string | No | Aggregation bucket size. |
query |
with |
string | No | Filter query. |
- name: recent_significant_events
type: kibana.streams.getSignificantEvents
with:
name: "logs-default"
from: "now-1h"
to: "now"
- Streams overview: The Observability Streams feature.
- Kibana action steps: The generic
kibana.requestfor Kibana APIs that don't have a named step.