Streams
Streams provide a unified data management layer for ingestion, routing, and processing. There are three stream types:
Wired streams are managed by Kibana. They route documents to child streams based on field conditions and support custom field mappings and processing steps.
Classic streams map to existing Elasticsearch data streams. You can add processing steps to classic streams without changing their underlying index template.
Query streams are virtual aggregations backed by an ES|QL expression. They aggregate data from multiple streams into a single logical view without duplicating documents.
18 endpoints
-
Get stream list
- GET /api/streams
-
Disable streams
- POST /api/streams/_disable
-
Enable streams
- POST /api/streams/_enable
-
Resync streams
- POST /api/streams/_resync
-
Delete a stream
- DELETE /api/streams/{name}
-
Get a stream
- GET /api/streams/{name}
-
Create or update a stream
- PUT /api/streams/{name}
-
Fork a stream
- POST /api/streams/{name}/_fork
-
Get ingest stream settings
- GET /api/streams/{name}/_ingest
-
Update ingest stream settings
- PUT /api/streams/{name}/_ingest
-
Get query stream settings
- GET /api/streams/{name}/_query
-
Upsert query stream settings
- PUT /api/streams/{name}/_query
-
Export stream content
- POST /api/streams/{name}/content/export
-
Import content into a stream
- POST /api/streams/{name}/content/import
-
Get stream attachments
- GET /api/streams/{streamName}/attachments
-
Bulk update attachments
- POST /api/streams/{streamName}/attachments/_bulk
-
Unlink an attachment from a stream
- DELETE /api/streams/{streamName}/attachments/{attachmentType}/{attachmentId}
-
Link an attachment to a stream
- PUT /api/streams/{streamName}/attachments/{attachmentType}/{attachmentId}