Get a stream

Base URL: https://{kibana_url}

GET /api/streams/{name}

Fetches a stream definition and associated dashboards

Required authorization

Authentication

Api key

Authorization: <value>

These APIs use key-based authentication. You must create an API key and use the encoded value in the request header. For example: Authorization: ApiKey base64AccessApiKey

Basic

Authorization: Basic <credentials>

Path parameters

Request body

Response

200

Stream definition and associated metadata.

application/json

Base URL: https://{kibana_url}

Examples

Request Console 1 / 2 languages

Console Kibana Dev Tools

GET kbn:/api/streams/NAME
{}

Generated from the API spec

curl Shell

curl -X GET "${KIBANA_URL}/api/streams/${NAME}" \
  -H "Authorization: ApiKey ${API_KEY}" \
  -H "Content-Type: application/json" \
  -d '{}'

Generated from the API spec

Response

{
  "dashboards": [],
  "data_stream_exists": true,
  "effective_failure_store": {
    "disabled": {},
    "from": "logs"
  },
  "effective_lifecycle": {
    "dsl": {
      "data_retention": "7d"
    },
    "from": "logs"
  },
  "effective_settings": {},
  "inherited_fields": {
    "@timestamp": {
      "from": "logs",
      "type": "date"
    },
    "log.level": {
      "from": "logs",
      "type": "keyword"
    }
  },
  "privileges": {
    "create_snapshot_repository": false,
    "lifecycle": true,
    "manage": true,
    "manage_failure_store": true,
    "monitor": true,
    "read_failure_store": true,
    "simulate": true,
    "text_structure": true,
    "view_index_metadata": true
  },
  "rules": [],
  "stream": {
    "description": "Web server access logs, routed by severity",
    "ingest": {
      "failure_store": {
        "inherit": {}
      },
      "lifecycle": {
        "inherit": {}
      },
      "processing": {
        "steps": [],
        "updated_at": "2025-01-15T10:30:00.000Z"
      },
      "settings": {},
      "wired": {
        "fields": {
          "host.name": {
            "type": "keyword"
          },
          "http.response.status_code": {
            "type": "long"
          },
          "message": {
            "type": "match_only_text"
          }
        },
        "routing": [
          {
            "destination": "logs.nginx.errors",
            "status": "enabled",
            "where": {
              "field": "http.response.status_code",
              "gte": 500
            }
          }
        ]
      }
    },
    "name": "logs.nginx",
    "type": "wired",
    "updated_at": "2025-01-15T10:30:00.000Z"
  }
}