﻿---
title: Create and manage datasets for ES|QL Data Federation
description: Create, inspect, update, and delete ES|QL Data Federation datasets in Kibana or with the Elasticsearch API.
url: https://www.elastic.co/elastic/docs-builder/docs/4572/reference/query-languages/esql/esql-data-federation-manage-datasets
products:
  - Elasticsearch
applies_to:
  - Elastic Cloud Serverless: Unavailable
  - Elastic Stack: Experimental in 9.5
---

# Create and manage datasets for ES|QL Data Federation
<warning>
  This feature is experimental. It is not intended for production use and there are no guarantees around performance, scale, or stability in this release.
</warning>

Create and manage ES|QL Data Federation datasets in Kibana or with the Elasticsearch API. Before
creating a dataset, [connect a data source](https://www.elastic.co/elastic/docs-builder/docs/4572/reference/query-languages/esql/esql-data-federation-sources) and review how to
[define a dataset](/elastic/docs-builder/docs/4572/reference/query-languages/esql/esql-data-federation-datasets#define-a-dataset). Creating a dataset doesn't check that the data source can read its resource, so also [grant read access](/elastic/docs-builder/docs/4572/reference/query-languages/esql/esql-data-federation-sources#grant-read-access) to the data in your cloud provider.
You can manage datasets in two ways:
<definitions>
  <definition term="Kibana UI">
    Add datasets with a step-by-step wizard, and view, edit, and delete them from the **Datasets** tab.
  </definition>
  <definition term="API">
    Create, get, list, and delete datasets with the `/_query/dataset` endpoint.
  </definition>
</definitions>


## Audit logging

With [audit logging enabled](https://docs-v3-preview.elastic.dev/elastic/docs-builder/docs/4572/deploy-manage/monitor/stack-audit-logging/enabling-audit-logs),
creating, updating, and deleting datasets generates `security_config_change` events. Refer to
[put_dataset](/elastic/docs-builder/docs/4572/reference/elasticsearch/elasticsearch-audit-events#event-put-dataset) and
[delete_dataset](/elastic/docs-builder/docs/4572/reference/elasticsearch/elasticsearch-audit-events#event-delete-dataset).