Get a watch
- GET /_watcher/watch/{id}
- Cluster privileges:
monitor_watcher
Path Parameters
-
idstring Namerequired -
The watch identifier.
Response
-
foundbooleanrequired -
_idstring Idrequired -
statusWatchStatus -
actionsActionsrequired -
last_checkedDateTime -
last_met_conditionDateTime -
versionnumber VersionNumberrequired -
execution_statestring -
watchWatch -
actionsmap string to Actionrequired -
<string>Action -
action_typeActionType -
Values:
emailwebhookindexloggingslackpagerduty -
conditionConditionContainer -
foreachstring -
max_iterationsnumber -
namestring Name -
throttle_periodstring Duration -
throttle_period_in_millisDurationValueUnitMillis -
transformTransformContainer -
chainTransformContainer -
scriptScriptTransform -
searchSearchTransform -
requestSearchInputRequestDefinitionrequired -
bodySearchInputRequestBody -
queryQueryContainerrequired -
indicesstring IndexName -
indices_optionsIndicesOptions -
allow_no_indicesboolean -
If false, the request returns an error if any wildcard expression, index alias, or
_allvalue targets only missing or closed indices. This behavior applies even if the request targets other open indices. For example, a request targetingfoo*,bar*returns an error if an index starts withfoobut no index starts withbar. -
expand_wildcardsstring ExpandWildcards -
Type of index that wildcard patterns can match. If the request can target data streams, this argument determines whether wildcard expressions match hidden data streams. Supports comma-separated values, such as
open,hidden.Supported values include:
all: Match any data stream or index, including hidden ones.open: Match open, non-hidden indices. Also matches any non-hidden data stream.closed: Match closed, non-hidden indices. Also matches any non-hidden data stream. Data streams cannot be closed.hidden: Match hidden data streams and hidden indices. Must be combined withopen,closed, orboth.none: Wildcard expressions are not accepted.
-
Values:
allopenclosedhiddennone -
If true, missing or closed indices are not included in the response.
-
ignore_throttledboolean · default: true -
If true, concrete, expanded or aliased indices are ignored when frozen.
-
search_typeSearchType -
Supported values include:
query_then_fetch: Documents are scored using local term and document frequencies for the shard. This is usually faster but less accurate.dfs_query_then_fetch: Documents are scored using global term and document frequencies across all shards. This is usually slower but more accurate.
-
Values:
query_then_fetchdfs_query_then_fetch -
templateSearchTemplateRequestBody -
explainboolean · default: false -
idstring Id -
ID of the search template to use. If no source is specified, this parameter is required.
-
paramsmap string to object -
profileboolean · default: false -
sourcestring -
An inline search template. Supports the same parameters as the search API's request body. Also supports Mustache variables. If no id is specified, this parameter is required.
-
rest_total_hits_as_intboolean -
timeoutstring Durationrequired -
indexIndexAction -
indexstring IndexNamerequired -
doc_idstring Id -
refreshRefresh -
Values:
truefalsewait_for -
op_typeOpType · default: index -
Supported values include:
index: Overwrite any documents that already exist.create: Only index documents that do not already exist.
-
Values:
indexcreate -
timeoutstring Duration · default: 60s -
execution_time_fieldstring Field -
emailEmailAction -
idstring Id -
bccstring | string -
ccstring | string -
fromstring -
priorityEmailPriority -
Values:
lowestlownormalhighhighest -
reply_tostring | string -
sent_dateDateTime -
subjectstringrequired -
tostring | stringrequired -
attachmentsmap string to EmailAttachmentContainer -
<string>EmailAttachmentContainer -
httpHttpEmailAttachment -
content_typestring -
inlineboolean -
requestHttpInputRequestDefinition -
authHttpInputAuthentication -
bodystring -
connection_timeoutstring Duration -
headersmap string to string -
hoststring -
methodHttpInputMethod -
Values:
headgetpostputdelete -
paramsmap string to string -
pathstring -
portnumber uint -
read_timeoutstring Duration -
schemeConnectionScheme -
Values:
httphttps -
urlstring -
reportingReportingEmailAttachment -
pagerdutyPagerDutyAction -
accountstring -
attach_payloadbooleanrequired -
clientstring -
client_urlstring -
contextsPagerDutyContext -
descriptionstringrequired -
event_typePagerDutyEventType · default: trigger -
Values:
triggerresolveacknowledge -
incident_keystringrequired -
slackSlackAction -
accountstring -
messageSlackMessagerequired -
attachmentsSlackAttachmentrequired -
dynamic_attachmentsSlackDynamicAttachment -
attachment_templateSlackAttachmentrequired -
list_pathstringrequired -
fromstringrequired -
iconstring -
textstringrequired -
tostringrequired -
webhookWebhookAction -
authHttpInputAuthentication -
bodystring -
connection_timeoutstring Duration -
headersmap string to string -
hoststring -
methodHttpInputMethod -
Values:
headgetpostputdelete -
paramsmap string to string -
pathstring -
portnumber uint -
read_timeoutstring Duration -
schemeConnectionScheme -
Values:
httphttps -
urlstring -
conditionConditionContainerrequired -
inputInputContainerrequired -
metadataMetadata -
statusWatchStatus -
actionsActionsrequired -
last_checkedDateTime -
last_met_conditionDateTime -
versionnumber VersionNumberrequired -
execution_statestring -
throttle_periodstring Duration -
throttle_period_in_millisDurationValueUnitMillis -
transformTransformContainer -
triggerTriggerContainerrequired -
_primary_termnumber -
_seq_nonumber SequenceNumber -
_versionnumber VersionNumber