Simulate data ingestion
- POST also GET /_ingest/{index}/_simulate
- POST also GET /_ingest/_simulate
Run ingest pipelines against a set of provided documents, optionally with substitute pipeline definitions, to simulate ingesting data into an index.
This API is meant to be used for troubleshooting or pipeline development, as it does not actually index any data into Elasticsearch.
The API runs the default and final pipeline for that index against a set of documents provided in the body of the request. If a pipeline contains a reroute processor, it follows that reroute processor to the new index, running that index's pipelines as well the same way that a non-simulated ingest would. No data is indexed into Elasticsearch. Instead, the transformed document is returned, along with the list of pipelines that have been run and the name of the index where the document would have been indexed if this were not a simulation. The transformed document is validated against the mappings that would apply to this index, and any validation error is reported in the result.
This API differs from the simulate pipeline API in that you specify a single pipeline for that API, and it runs only that one pipeline. The simulate pipeline API is more useful for developing a single pipeline, while the simulate ingest API is more useful for troubleshooting the interaction of the various pipelines that get applied when ingesting into an index.
By default, the pipeline definitions that are currently in the system are used. However, you can supply substitute pipeline definitions in the body of the request. These will be used in place of the pipeline definitions that are already in the system. This can be used to replace existing pipeline definitions or to create new ones. The pipeline substitutions are used only within this request.
Required authorization
- Index privileges index
Query parameters
-
pipelinestring -
The pipeline to use as the default pipeline. This value can be used to override the default pipeline of the index.
-
merge_type· default: index -
The mapping merge type if mapping overrides are being provided in mapping_addition. The allowed values are one of index or template. The index option merges mappings the way they would be merged into an existing index. The template option merges mappings the way they would be merged into a template.
-
Values:
indextemplate
Request body
-
component_template_substitutionsmap string to object -
A map of component template names to substitute component template definition objects.
-
<string>object -
templateobjectrequired -
aliasesmap string to object -
<string>object -
filterQuery -
Query used to limit documents the alias can access.
-
index_routingstring -
Value used to route indexing operations to a specific shard. If specified, this overwrites the
routingvalue for indexing operations. -
search_routingstring -
Value used to route search operations to a specific shard. If specified, this overwrites the
routingvalue for search operations. -
If
true, the alias is hidden. All indices for the alias must have the sameis_hiddenvalue. -
lifecycleobject -
data_retentionstring -
If defined, every document added to this data stream will be stored at least for this time frame. Any time after this duration the document could be deleted. When empty, every document in this data stream will be stored indefinitely.
-
retention_determined_by -
Configuration source that can influence the retention of a data stream.
-
Values:
data_stream_configurationdefault_global_retentionmax_global_retentiondefault_failures_retention -
downsamplingobject -
The list of downsampling rounds to execute as part of this downsampling configuration
-
downsampling_method -
The method used to downsample the data. There are two options
aggregateandlast_value. It requiresdownsamplingto be defined. Defaults toaggregate. -
Values:
aggregatelast_value -
data_stream_optionsobject -
failure_storeobject -
If defined, it specifies configuration for the failure store of this data stream.
-
enabledboolean · default: true -
If defined, it turns the failure store on/off (
true/false) for this data stream. A data stream failure store that's disabled (enabled:false) will redirect no new failed indices to the failure store; however, it will not remove any existing data from the failure store. -
created_dateunion -
Date and time when the component template was created. Only returned if the
humanquery parameter istrue. -
created_date_millisnumber -
Date and time when the component template was created, in milliseconds since the epoch.
-
index_template_substitutionsmap string to object -
A map of index template names to substitute index template definition objects.
-
<string>object -
index_patternsstringrequired -
Array of wildcard (
*) expressions used to match the names of data streams and indices during creation. -
composed_ofstringrequired -
An ordered list of component template names. Component templates are merged in the order specified, meaning that the last component template specified has the highest precedence.
-
templateobject -
Template to be applied. It may optionally include an
aliases,mappings, orsettingsconfiguration. -
aliasesmap string to object -
Aliases to add. If the index template includes a
data_streamobject, these are data stream aliases. Otherwise, these are index aliases. Data stream aliases ignore theindex_routing,routing, andsearch_routingoptions. -
<string>object -
filterQuery -
Query used to limit documents the alias can access.
-
index_routingstring -
Value used to route indexing operations to a specific shard. If specified, this overwrites the
routingvalue for indexing operations. -
If
true, the alias is hidden. All indices for the alias must have the sameis_hiddenvalue. -
mappingsobject -
Mapping for fields in the index. If specified, this mapping can include field names, field data types, and mapping parameters.
-
lifecycleobject -
data_retentionstring -
If defined, every document added to this data stream will be stored at least for this time frame. Any time after this duration the document could be deleted. When empty, every document in this data stream will be stored indefinitely.
-
retention_determined_by -
Configuration source that can influence the retention of a data stream.
-
Values:
data_stream_configurationdefault_global_retentionmax_global_retentiondefault_failures_retention -
downsamplingobject -
The list of downsampling rounds to execute as part of this downsampling configuration
-
downsampling_method -
The method used to downsample the data. There are two options
aggregateandlast_value. It requiresdownsamplingto be defined. Defaults toaggregate. -
Values:
aggregatelast_value -
data_stream_optionsobject -
failure_storeobject -
If defined, it specifies configuration for the failure store of this data stream.
-
enabledboolean · default: true -
If defined, it turns the failure store on/off (
true/false) for this data stream. A data stream failure store that's disabled (enabled:false) will redirect no new failed indices to the failure store; however, it will not remove any existing data from the failure store. -
versionnumber -
Version number used to manage index templates externally. This number is not automatically generated by Elasticsearch.
-
prioritynumber -
Priority to determine index template precedence when a new data stream or index is created. The index template with the highest priority is chosen. If no priority is specified the template is treated as though it is of priority 0 (lowest priority). This number is not automatically generated by Elasticsearch.
-
_metaobject -
Optional user metadata about the index template. May have any contents. This map is not automatically generated by Elasticsearch.
-
data_streamobject -
If this object is included, the template is used to create data streams and their backing indices. Supports an empty object. Data streams require a matching index template with a
data_streamobject. -
deprecatedboolean -
Marks this index template as deprecated. When creating or updating a non-deprecated index template that uses deprecated components, Elasticsearch will emit a deprecation warning.
-
ignore_missing_component_templatesstring -
A list of component template names that are allowed to be absent.
-
created_dateunion -
Date and time when the index template was created. Only returned if the
humanquery parameter istrue. -
created_date_millisnumber -
Date and time when the index template was created, in milliseconds since the epoch.
-
pipeline_substitutionsmap string to object -
Pipelines to test. If you don’t specify the
pipelinerequest path parameter, this parameter is required. If you specify both this and the request path parameter, the API only uses the request path parameter. -
<string>object -
on_failureProcessor -
Processors to run immediately after a processor failure.
-
processorsProcessor -
Processors used to perform transformations on documents before indexing. Processors run sequentially in the order specified.
-
deprecatedboolean · default: false -
Marks this ingest pipeline as deprecated. When a deprecated ingest pipeline is referenced as the default or final pipeline when creating or updating a non-deprecated index template, Elasticsearch will emit a deprecation warning.
-
_metaobject -
Arbitrary metadata about the ingest pipeline. This map is not automatically generated by Elasticsearch.
-
created_dateunion -
Date and time when the pipeline was created. Only returned if the
humanquery parameter istrue. -
created_date_millisnumber -
Date and time when the pipeline was created, in milliseconds since the epoch.
-
modified_dateunion -
Date and time when the pipeline was last modified. Only returned if the
humanquery parameter istrue.
Response
-
docsobjectrequired -
docobject -
_indexstringrequired -
Name of the index that the document would be indexed into if this were not a simulation.
-
ignored_fieldsstring to string -
A list of the fields that would be ignored at the indexing step. For example, a field whose value is larger than the allowed limit would make it through all of the pipelines, but would not be indexed into Elasticsearch.