Get incoming agent data

Base URL: https://{kibana_url}

GET /api/fleet/agent_status/data
GET /s/{space_id}/api/fleet/agent_status/data

Auth

Get the data streams that an agent is actively sending data to.

Required privileges

Privileges fleet-agents-read

Path parameters

space_id string optional: An identifier for the space. If space_id is not provided in the URL, the default space is used. Refer to Spaces for more information.

Query parameters

agentsIds string[] · max items: 10000 required: Agent IDs to check data for, as an array or comma-separated string
pkgName string · min length: 0: Filter by integration package name
pkgVersion string: Filter by integration package version
previewData boolean · default: false: When true, return a preview of the ingested data

Responses

Successful response

application/json

dataPreview object[] · max items: 10000 required
items string to object[] · max items: 10000 required

Bad Request

application/json

attributes object required
error string
errorType string
message string required
statusCode number

Base URL: https://{kibana_url}

Examples

Request Console 1 / 2 languages

Console Kibana Dev Tools

GET kbn:/api/fleet/agent_status/data?agentsIds=AGENTS_IDS

Generated from the API spec

curl Shell

curl -X GET "${KIBANA_URL}/api/fleet/agent_status/data?agentsIds=${AGENTS_IDS}" \
  -H "Authorization: ApiKey ${API_KEY}"

Generated from the API spec

Response

Data streams the agent is actively sending data to

{
  "items": [
    {
      "data": {
        "logs-nginx.access-default": [
          {
            "id": "agent-id-1",
            "name": "my-host"
          }
        ]
      }
    }
  ],
  "total": 1,
  "totalMonitoring": 0
}

{
  "error": "Bad Request",
  "message": "An error message describing what went wrong",
  "statusCode": 400
}