Get data streams

Base URL: https://{kibana_url}

GET /api/fleet/data_streams

List all Fleet-managed data streams with metadata including package, namespace, size, and last activity.

Required authorization

Authentication

Api key

Authorization: <value>

These APIs use key-based authentication. You must create an API key and use the encoded value in the request header. For example: Authorization: ApiKey base64AccessApiKey

Basic

Authorization: Basic <credentials>

Responses

Successful response

application/json

Bad Request

application/json

Base URL: https://{kibana_url}

Examples

Request Console 1 / 2 languages

Console Kibana Dev Tools

GET kbn:/api/fleet/data_streams

Generated from the API spec

curl Shell

curl -X GET "${KIBANA_URL}/api/fleet/data_streams" \
  -H "Authorization: ApiKey ${API_KEY}"

Generated from the API spec

Response

List of Fleet-managed data streams

{
  "data_streams": [
    {
      "dashboards": [
        {
          "id": "nginx-overview",
          "title": "Nginx Overview"
        }
      ],
      "dataset": "nginx.access",
      "index": "logs-nginx.access-default",
      "last_activity_ms": 1700000000000,
      "namespace": "default",
      "package": "nginx",
      "package_version": "1.20.0",
      "serviceDetails": "null",
      "size_in_bytes": 1048576,
      "size_in_bytes_formatted": "1mb",
      "type": "logs"
    },
    {
      "dashboards": [],
      "dataset": "system.cpu",
      "index": "metrics-system.cpu-default",
      "last_activity_ms": 1699999000000,
      "namespace": "default",
      "package": "system",
      "package_version": "1.38.0",
      "serviceDetails": "null",
      "size_in_bytes": 524288,
      "size_in_bytes_formatted": "512kb",
      "type": "metrics"
    }
  ]
}

{
  "error": "Bad Request",
  "message": "An error message describing what went wrong",
  "statusCode": 400
}