---
title: Streams action steps
description: Reference for the three Streams action steps that operate on Observability Streams from a workflow.
url: https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6724/explore-analyze/workflows/steps/streams
products:
  - Elastic Cloud Enterprise
  - Elastic Cloud Hosted
  - Elastic Cloud Serverless
  - Elastic Cloud on Kubernetes
  - Elastic Stack
  - Kibana
applies_to:
  - Elastic Cloud Serverless: Preview
  - Elastic Stack: Preview since 9.4
---

# Streams action steps
Streams action steps operate on Observability [Streams](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6724/solutions/observability/streams/streams) from a workflow. Use them to list available streams, fetch a specific stream's configuration, or pull significant events from a stream's time window.
<warning>
  Streams action steps, along with the Streams feature itself, are in technical preview in 9.4. Schemas and semantics can change in future releases. Use these steps for prototypes and investigation workflows; hold off on critical automation until Streams reaches GA.
</warning>

**Schema convention.** In each schema table below, the `Location` column indicates where each parameter sits in the YAML:
- `top level` — Alongside `type` and `name`, at the top of the step or trigger definition.
- ``with`` — Inside the step's `with:` block.
- ``on`` — Inside the trigger's `on:` block.


## Step types

- [`kibana.streams.list`](#kibana-streams-list): Enumerate available streams.
- [`kibana.streams.get`](#kibana-streams-get): Fetch a stream by name.
- [`kibana.streams.getSignificantEvents`](#kibana-streams-getsignificantevents): Pull significant events from a stream.

---


## `kibana.streams.list`

List every available stream in the current Kibana space. This step takes no parameters.
```yaml
- name: list_streams
  type: kibana.streams.list
```


## `kibana.streams.get`

Fetch a stream by name. The `name` is the human-readable stream identifier shown in the Kibana UI.

| Parameter | Location | Type   | Required | Description  |
|-----------|----------|--------|----------|--------------|
| `name`    | `with`   | string | Yes      | Stream name. |

```yaml
- name: get_logs_stream
  type: kibana.streams.get
  with:
    name: "logs-default"
```


## `kibana.streams.getSignificantEvents`

Fetch significant events from a stream in a specified time range, optionally filtered by a query.

| Parameter    | Location | Type   | Required | Description                                                                                             |
|--------------|----------|--------|----------|---------------------------------------------------------------------------------------------------------|
| `name`       | `with`   | string | Yes      | Stream name.                                                                                            |
| `from`       | `with`   | string | No       | Start of the time range. Accepts ISO timestamps (`2026-04-01T00:00:00Z`) or relative values (`now-1h`). |
| `to`         | `with`   | string | No       | End of the time range.                                                                                  |
| `bucketSize` | `with`   | string | No       | Aggregation bucket size.                                                                                |
| `query`      | `with`   | string | No       | Filter query.                                                                                           |

```yaml
- name: recent_significant_events
  type: kibana.streams.getSignificantEvents
  with:
    name: "logs-default"
    from: "now-1h"
    to: "now"
```


## Related

- [Streams overview](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6724/solutions/observability/streams/streams): The Observability Streams feature.
- [Kibana action steps](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6724/explore-analyze/workflows/steps/kibana): The generic `kibana.request` for Kibana APIs that don't have a named step.