Check if data streams have data

Auth

Check whether one or more data stream index patterns contain any documents indexed at or after the given start time.

Required authorization

dataStreams string · max length: 4096 required: A comma-separated list of data stream index patterns to check. Each pattern must be of the form logs-<dataset>-* or metrics-<dataset>-*.
start string · max length: 64 required: An ISO 8601 timestamp. Only documents with an @timestamp at or after this time are considered.

Successful response

application/json

results map string to boolean required: One entry per requested index pattern. true when the pattern matched at least one document, false when it matched none or the pattern resolved to no index.

Bad request

application/json

Examples

Request Console 1 / 2 languages

Console Kibana Dev Tools

GET kbn:/api/fleet/data_streams/data?dataStreams=DATA_STREAMS&start=START

Generated from the API spec

curl Shell

curl -X GET "${KIBANA_URL}/api/fleet/data_streams/data?dataStreams=${DATA_STREAMS}&start=${START}" \
  -H "Authorization: ApiKey ${API_KEY}"

Generated from the API spec

Response

One entry per requested index pattern

{
  "results": {
    "logs-aws.cloudtrail-*": true,
    "metrics-aws.ec2-*": false
  }
}

{
  "error": "Bad Request",
  "message": "Invalid index pattern: \u0022.security-7\u0022",
  "statusCode": 400
}