Elastic Stack

Elastic Stack (ELK Stack) Fleet API

The fleet API from Elastic Stack (ELK Stack) — 4 operation(s) for fleet.

GitHub OpenAPI

Operations 7

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /{index}/_fleet/global_checkpoints Get an index's global checkpoints · Get global checkpoints #
Ask an LLM
“What are the current global checkpoints for an index Fleet server reads from?”
“Can I wait for the global checkpoint to advance before it returns?”
Tell an agent
Get global checkpoints for index {index}.
Wait for checkpoints on {index} to advance past {checkpoints}, wait_for_advance {wait_for_advance}.
GET /_fleet/_fleet_msearch Run a Fleet multi search via GET, no index · Run multiple Fleet searches #
Ask an LLM
“Can I send several Fleet searches in one GET request without naming an index in the path?”
“Is wait_for_checkpoints supported on a GET Fleet msearch at the cluster level?”
Tell an agent
Run a GET Fleet msearch across indices after checkpoints {wait_for_checkpoints}.
Send a cluster-level GET Fleet multi search, max concurrent {max_concurrent_searches}.
POST /_fleet/_fleet_msearch Run a Fleet multi search via POST, no index · Run multiple Fleet searches #
Ask an LLM
“How do I POST a batch of Fleet searches without an index in the URL?”
“Can a POST Fleet msearch at cluster level allow partial results?”
Tell an agent
POST a cluster-level Fleet msearch with partial results {allow_partial_search_results}.
Submit several Fleet searches by POST with no default index, search type {search_type}.
GET /{index}/_fleet/_fleet_msearch Run a Fleet multi search via GET on an index · Run multiple Fleet searches #
Ask an LLM
“Can I run several Fleet searches against one default index using GET?”
“Does an index-scoped GET Fleet msearch honor checkpoints?”
Tell an agent
Run a GET Fleet msearch on index {index}.
GET multiple Fleet searches on {index} waiting for checkpoints {wait_for_checkpoints}.
POST /{index}/_fleet/_fleet_msearch Run a Fleet multi search via POST on an index · Run multiple Fleet searches #
Ask an LLM
“How do I POST a batch of Fleet searches against a specific index?”
“Can an index-scoped POST Fleet msearch limit concurrent shard requests?”
Tell an agent
POST a Fleet msearch to index {index}.
Send multiple Fleet searches by POST to {index} with shard concurrency {max_concurrent_shard_requests}.
POST /{index}/_fleet/_fleet_search Run a Fleet search via POST · Run a Fleet search #
Ask an LLM
“How do I POST a Fleet search with a Query DSL body that waits for a checkpoint?”
“Can a POST Fleet search include aggregations and sorting?”
Tell an agent
POST a Fleet search to {index} with query {query}.
Send a POST Fleet search on {index} with aggregations {aggregations} after checkpoints {wait_for_checkpoints}.

Documentation

📖
Documentation
https://www.elastic.co/docs/reference/elasticsearch
📖
APIReference
https://www.elastic.co/docs/api/doc/elasticsearch/
📖
Documentation
https://www.elastic.co/docs/reference/kibana
📖
APIReference
https://www.elastic.co/docs/api/doc/kibana/

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/elk-stack/refs/heads/main/openapi/elk-stack-fleet-api-openapi.yml

Other Resources

🔗
SourceCode
https://github.com/elastic/elasticsearch-specification
🔗
SourceCode
https://github.com/elastic/kibana
🔗
ToolCrosswalk
https://raw.githubusercontent.com/api-evangelist/elk-stack/refs/heads/main/mcp/elk-stack-tool-crosswalk.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/elk-stack:elk-stack-fleet-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

elk-stack-fleet-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Elasticsearch Request & Response Specification Fleet API
  license:
    name: Apache 2.0
    url: https://github.com/elastic/elasticsearch-specification/blob/main/LICENSE
  version: ''
tags:


# --- truncated at 32 KB (462 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/elk-stack/refs/heads/main/openapi/elk-stack-fleet-api-openapi.yml