Simulate data ingestion
- POST also GET /_ingest/{index}/_simulate
- POST also GET /_ingest/_simulate
Run ingest pipelines against a set of provided documents, optionally with substitute pipeline definitions, to simulate ingesting data into an index.
This API is meant to be used for troubleshooting or pipeline development, as it does not actually index any data into Elasticsearch.
The API runs the default and final pipeline for that index against a set of documents provided in the body of the request. If a pipeline contains a reroute processor, it follows that reroute processor to the new index, running that index's pipelines as well the same way that a non-simulated ingest would. No data is indexed into Elasticsearch. Instead, the transformed document is returned, along with the list of pipelines that have been run and the name of the index where the document would have been indexed if this were not a simulation. The transformed document is validated against the mappings that would apply to this index, and any validation error is reported in the result.
This API differs from the simulate pipeline API in that you specify a single pipeline for that API, and it runs only that one pipeline. The simulate pipeline API is more useful for developing a single pipeline, while the simulate ingest API is more useful for troubleshooting the interaction of the various pipelines that get applied when ingesting into an index.
By default, the pipeline definitions that are currently in the system are used. However, you can supply substitute pipeline definitions in the body of the request. These will be used in place of the pipeline definitions that are already in the system. This can be used to replace existing pipeline definitions or to create new ones. The pipeline substitutions are used only within this request.
- Index privileges:
index
Path Parameters
-
indexstring IndexNameoptional -
The index to simulate ingesting into. This value can be overridden by specifying an index on each document. If you specify this parameter in the request path, it is used for any documents that do not explicitly specify an index argument.
Leave it out to use
/_ingest/_simulate.
Query Parameters
-
pipelinestring The pipeline to use as the default pipeline. This value can be used to override the default pipeline of the index.
-
merge_typeMergeType · default: index The mapping merge type if mapping overrides are being provided in mapping_addition. The allowed values are one of index or template. The index option merges mappings the way they would be merged into an existing index. The template option merges mappings the way they would be merged into a template.
-
Values:
indextemplate
Request
-
docsDocumentrequired -
Sample documents to test in the pipeline.
-
component_template_substitutionsmap string to ComponentTemplateNode -
A map of component template names to substitute component template definition objects.
-
<string>ComponentTemplateNode -
templateComponentTemplateSummaryrequired -
_metaMetadata -
versionnumber VersionNumber -
settingsmap string to IndexSettings -
mappingsTypeMapping -
all_fieldAllField -
analyzerstringrequired -
enabledbooleanrequired -
omit_normsbooleanrequired -
search_analyzerstringrequired -
similaritystringrequired -
storebooleanrequired -
store_term_vector_offsetsbooleanrequired -
store_term_vector_payloadsbooleanrequired -
store_term_vector_positionsbooleanrequired -
store_term_vectorsbooleanrequired -
date_detectionboolean -
dynamicDynamicMapping -
Values:
strictruntimetruefalse -
dynamic_date_formatsstring -
dynamic_templatesstring to DynamicTemplate -
_field_namesFieldNamesField -
enabledbooleanrequired -
index_fieldIndexField -
enabledbooleanrequired -
_metaMetadata -
numeric_detectionboolean -
propertiesmap string to Property -
_sourceSourceField -
enabledboolean -
excludesstring -
includesstring -
modeSourceFieldMode -
Supported values include:
disabledstoredcolumnar_storedsynthetic: Instead of storing source documents on disk exactly as you send them, Elasticsearch can reconstruct source content on the fly upon retrieval.
-
Values:
disabledstoredcolumnar_storedsynthetic -
runtimemap string to RuntimeField -
<string>RuntimeField -
fieldsmap string to CompositeSubField -
For type
composite -
<string>CompositeSubField -
typeRuntimeFieldTyperequired -
Values:
booleancompositedatedoublegeo_pointgeo_shapeipkeywordlonglookup -
formatstring -
A custom format for
datetype runtime fields. -
input_fieldstring Field -
For type
lookup -
target_fieldstring Field -
For type
lookup -
target_indexstring IndexName -
For type
lookup -
scriptstring Script -
Painless script executed at query time.
-
on_script_errorOnScriptError -
Values:
failcontinue -
typeRuntimeFieldTyperequired -
Field type, which can be:
boolean,composite,date,double,geo_point,ip,keyword,long, orlookup. -
Values:
booleancompositedatedoublegeo_pointgeo_shapeipkeywordlonglookup -
enabledboolean -
subobjectsSubobjects -
Values:
truefalse -
_data_stream_timestampDataStreamTimestamp -
enabledbooleanrequired -
aliasesmap string to AliasDefinition -
<string>AliasDefinition -
filterQueryContainer -
Query used to limit documents the alias can access.
-
index_routingstring -
Value used to route indexing operations to a specific shard. If specified, this overwrites the
routingvalue for indexing operations. -
is_write_indexboolean · default: false -
If
true, the index is the write index for the alias. -
routingstring -
Value used to route indexing and search operations to a specific shard.
-
search_routingstring -
Value used to route search operations to a specific shard. If specified, this overwrites the
routingvalue for search operations. -
If
true, the alias is hidden. All indices for the alias must have the sameis_hiddenvalue. -
lifecycleDataStreamLifecycle -
data_retentionstring Duration -
If defined, every document added to this data stream will be stored at least for this time frame. Any time after this duration the document could be deleted. When empty, every document in this data stream will be stored indefinitely.
-
effective_retentionstring Duration -
The least amount of time data should be kept by elasticsearch.
-
retention_determined_byRetentionSource -
Configuration source that can influence the retention of a data stream.
-
Values:
data_stream_configurationdefault_global_retentionmax_global_retentiondefault_failures_retention -
downsamplingDownsamplingRound -
The list of downsampling rounds to execute as part of this downsampling configuration
-
afterstring Durationrequired -
The duration since rollover when this downsampling round should execute
-
fixed_intervalstringrequired -
The downsample interval.
-
downsampling_methodSamplingMethod -
The method used to downsample the data. There are two options
aggregateandlast_value. It requiresdownsamplingto be defined. Defaults toaggregate. -
Values:
aggregatelast_value -
enabledboolean · default: true -
If defined, it turns data stream lifecycle on/off (
true/false) for this data stream. A data stream lifecycle that's disabled (enabled:false) will have no effect on the data stream. -
frozen_afterstring Duration -
The period after which data stream backing indices are automatically converted to partially mounted searchable snapshots. This field is valid only on main data stream lifecycles and cannot be set on failure-store lifecycles.
-
data_stream_optionsDataStreamOptions -
failure_storeDataStreamFailureStore -
If defined, it specifies configuration for the failure store of this data stream.
-
enabledboolean · default: true -
If defined, it turns the failure store on/off (
true/false) for this data stream. A data stream failure store that's disabled (enabled:false) will redirect no new failed indices to the failure store; however, it will not remove any existing data from the failure store. -
lifecycleFailureStoreLifecycle -
If defined, it specifies the lifecycle configuration for the failure store of this data stream.
-
data_retentionstring Duration -
If defined, every document added to this data stream will be stored at least for this time frame. Any time after this duration the document could be deleted. When empty, every document in this data stream will be stored indefinitely.
-
enabledboolean · default: true -
If defined, it turns data stream lifecycle on/off (
true/false) for this data stream. A data stream lifecycle that's disabled (enabled:false) will have no effect on the data stream. -
versionnumber VersionNumber -
_metaMetadata -
deprecatedboolean -
created_dateDateTime -
Date and time when the component template was created. Only returned if the
humanquery parameter istrue. -
created_date_millisEpochTimeUnitMillis -
Date and time when the component template was created, in milliseconds since the epoch.
-
modified_dateDateTime -
Date and time when the component template was last modified. Only returned if the
humanquery parameter istrue. -
modified_date_millisEpochTimeUnitMillis -
Date and time when the component template was last modified, in milliseconds since the epoch.
-
index_template_substitutionsmap string to IndexTemplate -
A map of index template names to substitute index template definition objects.
-
<string>IndexTemplate -
index_patternsstring Namesrequired -
Array of wildcard (
*) expressions used to match the names of data streams and indices during creation. -
composed_ofstring Namerequired -
An ordered list of component template names. Component templates are merged in the order specified, meaning that the last component template specified has the highest precedence.
-
templateIndexTemplateSummary -
Template to be applied. It may optionally include an
aliases,mappings, orsettingsconfiguration. -
aliasesmap string to Alias -
Aliases to add. If the index template includes a
data_streamobject, these are data stream aliases. Otherwise, these are index aliases. Data stream aliases ignore theindex_routing,routing, andsearch_routingoptions. -
<string>Alias -
filterQueryContainer -
Query used to limit documents the alias can access.
-
index_routingstring -
Value used to route indexing operations to a specific shard. If specified, this overwrites the
routingvalue for indexing operations. -
If
true, the alias is hidden. All indices for the alias must have the sameis_hiddenvalue. -
is_write_indexboolean · default: false -
If
true, the index is the write index for the alias. -
routingstring -
Value used to route indexing and search operations to a specific shard.
-
search_routingstring -
Value used to route search operations to a specific shard. If specified, this overwrites the
routingvalue for search operations. -
mappingsTypeMapping -
Mapping for fields in the index. If specified, this mapping can include field names, field data types, and mapping parameters.
-
settingsIndexSettings -
Configuration options for the index.
-
lifecycleDataStreamLifecycle -
data_retentionstring Duration -
If defined, every document added to this data stream will be stored at least for this time frame. Any time after this duration the document could be deleted. When empty, every document in this data stream will be stored indefinitely.
-
effective_retentionstring Duration -
The least amount of time data should be kept by elasticsearch.
-
retention_determined_byRetentionSource -
Configuration source that can influence the retention of a data stream.
-
Values:
data_stream_configurationdefault_global_retentionmax_global_retentiondefault_failures_retention -
downsamplingDownsamplingRound -
The list of downsampling rounds to execute as part of this downsampling configuration
-
afterstring Durationrequired -
The duration since rollover when this downsampling round should execute
-
fixed_intervalstringrequired -
The downsample interval.
-
downsampling_methodSamplingMethod -
The method used to downsample the data. There are two options
aggregateandlast_value. It requiresdownsamplingto be defined. Defaults toaggregate. -
Values:
aggregatelast_value -
enabledboolean · default: true -
If defined, it turns data stream lifecycle on/off (
true/false) for this data stream. A data stream lifecycle that's disabled (enabled:false) will have no effect on the data stream. -
frozen_afterstring Duration -
The period after which data stream backing indices are automatically converted to partially mounted searchable snapshots. This field is valid only on main data stream lifecycles and cannot be set on failure-store lifecycles.
-
data_stream_optionsDataStreamOptions -
failure_storeDataStreamFailureStore -
If defined, it specifies configuration for the failure store of this data stream.
-
enabledboolean · default: true -
If defined, it turns the failure store on/off (
true/false) for this data stream. A data stream failure store that's disabled (enabled:false) will redirect no new failed indices to the failure store; however, it will not remove any existing data from the failure store. -
lifecycleFailureStoreLifecycle -
If defined, it specifies the lifecycle configuration for the failure store of this data stream.
-
data_retentionstring Duration -
If defined, every document added to this data stream will be stored at least for this time frame. Any time after this duration the document could be deleted. When empty, every document in this data stream will be stored indefinitely.
-
enabledboolean · default: true -
If defined, it turns data stream lifecycle on/off (
true/false) for this data stream. A data stream lifecycle that's disabled (enabled:false) will have no effect on the data stream. -
versionnumber VersionNumber -
Version number used to manage index templates externally. This number is not automatically generated by Elasticsearch.
-
prioritynumber -
Priority to determine index template precedence when a new data stream or index is created. The index template with the highest priority is chosen. If no priority is specified the template is treated as though it is of priority 0 (lowest priority). This number is not automatically generated by Elasticsearch.
-
_metaMetadata -
Optional user metadata about the index template. May have any contents. This map is not automatically generated by Elasticsearch.
-
allow_auto_createboolean -
data_streamIndexTemplateDataStreamConfiguration -
If this object is included, the template is used to create data streams and their backing indices. Supports an empty object. Data streams require a matching index template with a
data_streamobject. -
If true, the data stream is hidden.
-
allow_custom_routingboolean · default: false -
If true, the data stream supports custom routing.
-
deprecatedboolean -
Marks this index template as deprecated. When creating or updating a non-deprecated index template that uses deprecated components, Elasticsearch will emit a deprecation warning.
-
ignore_missing_component_templatesstring Names -
A list of component template names that are allowed to be absent.
-
created_dateDateTime -
Date and time when the index template was created. Only returned if the
humanquery parameter istrue. -
created_date_millisEpochTimeUnitMillis -
Date and time when the index template was created, in milliseconds since the epoch.
-
modified_dateDateTime -
Date and time when the index template was last modified. Only returned if the
humanquery parameter istrue. -
modified_date_millisEpochTimeUnitMillis -
Date and time when the index template was last modified, in milliseconds since the epoch.
-
mapping_additionTypeMapping -
pipeline_substitutionsmap string to Pipeline -
Pipelines to test. If you don’t specify the
pipelinerequest path parameter, this parameter is required. If you specify both this and the request path parameter, the API only uses the request path parameter. -
<string>Pipeline -
descriptionstring -
Description of the ingest pipeline.
-
on_failureProcessorContainer -
Processors to run immediately after a processor failure.
-
processorsProcessorContainer -
Processors used to perform transformations on documents before indexing. Processors run sequentially in the order specified.
-
versionnumber VersionNumber -
Version number used by external systems to track ingest pipelines.
-
deprecatedboolean · default: false -
Marks this ingest pipeline as deprecated. When a deprecated ingest pipeline is referenced as the default or final pipeline when creating or updating a non-deprecated index template, Elasticsearch will emit a deprecation warning.
-
_metaMetadata -
Arbitrary metadata about the ingest pipeline. This map is not automatically generated by Elasticsearch.
-
created_dateDateTime -
Date and time when the pipeline was created. Only returned if the
humanquery parameter istrue. -
created_date_millisEpochTimeUnitMillis -
Date and time when the pipeline was created, in milliseconds since the epoch.
-
modified_dateDateTime -
Date and time when the pipeline was last modified. Only returned if the
humanquery parameter istrue. -
modified_date_millisEpochTimeUnitMillis -
Date and time when the pipeline was last modified, in milliseconds since the epoch.
-
field_access_patternFieldAccessPattern · default: classic -
Controls how processors in this pipeline should read and write data on a document's source.
-
Values:
classicflexible
Response
-
docsSimulateIngestDocumentResultrequired -
docIngestDocumentSimulation -
_idstring Idrequired -
Identifier for the document.
-
_indexstring IndexNamerequired -
Name of the index that the document would be indexed into if this were not a simulation.
-
_sourcemap string to objectrequired -
JSON body for the document.
-
_versionStringifiedVersionNumberrequired -
executed_pipelinesstringrequired -
A list of the names of the pipelines executed on this document.
-
ignored_fieldsstring to string -
A list of the fields that would be ignored at the indexing step. For example, a field whose value is larger than the allowed limit would make it through all of the pipelines, but would not be indexed into Elasticsearch.
-
errorErrorCause -
Any error resulting from simulatng ingest on this doc. This can be an error generated by executing a processor, or a mapping validation error when simulating indexing the resulting doc.
-
typestringrequired -
The type of error
-
reasonstringnullable -
A human-readable explanation of the error, in English.
-
stack_tracestring -
The server stack trace. Present only if the
error_trace=trueparameter was sent with the request. -
caused_byErrorCause -
root_causeErrorCause -
suppressedErrorCause -
effective_mappingTypeMapping