Run a Fleet search

  • POST also GET /{index}/_fleet/_fleet_search

The purpose of the Fleet search API is to provide an API where the search will be run only after the provided checkpoint has been processed and is visible for searches inside of Elasticsearch.

  • Index privileges: read

Path Parameters

index union IndexName | IndexAlias required

A single target to search. If the target is an index alias, it must resolve to a single index.

Response