Using the APIsedit
Interact with the Kibana APIs through the curl command and HTTP and HTTPs protocols.
It is recommended that you use HTTPs on port 5601 because it is more secure.
The Kibana Console supports only Elasticsearch APIs. You are unable to interact with the Kibana APIs with the Console and must use curl or another HTTP tool instead. For more information, refer to Console.
Authenticationedit
Kibana supports token-based authentication with the same username and password that you use to log into the Kibana Console.
API callsedit
API calls are stateless. Each request that you make happens in isolation from other calls and must include all of the necessary information for Kibana to fulfill the request. API requests return JSON output, which is a format that is machine-readable and works well for automation.
Calls to the API endpoints require different operations. To interact with the Kibana APIs, use the following operations:
- GET - Fetches the information.
- POST - Adds new information.
- PUT - Updates the existing information.
- DELETE - Removes the information.
For example, the following curl command exports a dashboard:
curl -X POST api/kibana/dashboards/export?dashboard=942dcef0-b2cd-11e8-ad8e-85441f0c2e5c
Request headersedit
For all APIs, you must use a request header. The Kibana APIs support the kbn-xsrf and Content-Type headers.
-
kbn-xsrf: true -
By default, you must use
kbn-xsrffor all API calls, except in the following scenarios:-
The API endpoint uses the
GETorHEADoperations -
The path is whitelisted using the
server.xsrf.whitelistsetting -
XSRF protections are disabled using the
server.xsrf.disableProtectionsetting
-
The API endpoint uses the
-
Content-Type: application/json -
Applicable only when you send a payload in the API request. Kibana API requests and responses use JSON. Typically, if you include the
kbn-xsrfheader, you must also include theContent-Typeheader.
Request header example:
curl -X POST \
http://localhost:5601/api/spaces/space \
-H 'Content-Type: application/json' \
-H 'kbn-xsrf: true' \
-d '{
"id": "sales",
"name": "Sales",
"description": "This is your Sales Space!",
"disabledFeatures": []
}
'