Search workflow executions

Base URL: https://{kibana_url}

GET /api/workflows/workflow/executions
GET /s/{space_id}/api/workflows/workflow/executions

Refer to Spaces for more information.

Search across all workflow executions.

Required authorization

Authentication

Api key

Authorization: <value>

These APIs use key-based authentication. You must create an API key and use the encoded value in the request header. For example: Authorization: ApiKey base64AccessApiKey

Basic

Authorization: Basic <credentials>

Query parameters

Responses

200

Indicates a successful response

application/json

400

Indicates a bad request, such as invalid KQL syntax

application/json

Base URL: https://{kibana_url}

Examples

Request Console 1 / 2 languages

Console Kibana Dev Tools

GET kbn://api/workflows/workflow/executions?from=0&size=25&trackTotalHits=true&kql=startedAt >= "now-15m"&sortField=startedAt&sortOrder=desc

curl Shell

curl \
  -X GET "${KIBANA_URL}/api/workflows/workflow/executions?page=1&size=25&trackTotalHits=true&kql=startedAt%20%3E%3D%20%22now-15m%22&sortField=startedAt&sortOrder=desc" \
  -H "Authorization: ApiKey ${API_KEY}"

Response

Example paginated list of workflow-level executions

{
  "page": 1,
  "results": [
    {
      "duration": 3000,
      "error": "null",
      "executedBy": "elastic",
      "finishedAt": "2025-11-20T12:00:03.000Z",
      "id": "exec-a1b2c3d4-e5f6-7890",
      "isTestRun": false,
      "managed": false,
      "spaceId": "default",
      "startedAt": "2025-11-20T12:00:00.000Z",
      "status": "completed",
      "tags": [
        "reporting"
      ],
      "triggeredBy": "manual",
      "workflowId": "workflow-a1b2c3d4-e5f6-7890-abcd-ef1234567890",
      "workflowName": "Example Workflow"
    }
  ],
  "size": 25,
  "total": 1
}

{
  "message": "Invalid KQL: Expected AND, OR, or end of input but \u0022f\u0022 found."
}