Execute enrich policy APIedit

Executes an existing enrich policy.

PUT /_enrich/policy/my-policy/_execute

Requestedit

PUT /_enrich/policy/<enrich-policy>/_execute

POST /_enrich/policy/<enrich-policy>/_execute

Prerequisitesedit

If you use Elasticsearch security features, you must have:

  • read index privileges for any indices used
  • The enrich_user built-in role

Descriptionedit

Use the execute enrich policy API to create the enrich index for an existing enrich policy.

The enrich index contains documents from the policy’s source indices. Enrich indices always begin with .enrich-*, are read-only, and are force merged.

Enrich indices should be used by the enrich processor only. Avoid using enrich indices for other purposes.

Once created, you cannot update or index documents to an enrich index. Instead, update your source indices and execute the enrich policy again. This creates a new enrich index from your updated source indices. The previous enrich index will deleted with a delayed maintenance job. By default this is done every 15 minutes.

Because this API request performs several operations, it may take a while to return a response.

Path parametersedit

<enrich-policy>
(Required, string) Enrich policy to execute.

Query parametersedit

wait_for_completion
(Required, Boolean) If true, the request blocks other enrich policy execution requests until complete. Defaults to true.