AuthThe Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats.AvailabilityGenerally available since 1.3This functionality is generally available and ready for production usage.Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments.This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.
Comma-separated list of data streams, indices, and aliases to search.
Supports wildcards (*).
To search all data streams or indices, omit this parameter or use * or _all.
If false, the request returns an error if any wildcard expression, index alias, or _all value targets only missing or closed indices.
This behavior applies even if the request targets other open indices.
all_shardsboolean · default: false
If true, the validation is executed on all shards instead of one random shard per index.
analyzerstring
Analyzer to use for the query string.
This parameter can only be used when the q query string parameter is specified.
analyze_wildcardboolean · default: false
If true, wildcard and prefix queries are analyzed.
default_operatorenum · default: or
The default operator for query string query: and or or.
Values:andANDorOR
dfstring
Field to use as default where no field prefix is given in the query string.
This parameter can only be used when the q query string parameter is specified.
expand_wildcardsuniononeOf · default: open
Type of index that wildcard patterns can match.
If the request can target data streams, this argument determines whether wildcard expressions match hidden data streams.
Supports comma-separated values, such as open,hidden.
Supported values include:
all: Match any data stream or index, including hidden ones.
open: Match open, non-hidden indices. Also matches any non-hidden data stream.
closed: Match closed, non-hidden indices. Also matches any non-hidden data stream. Data streams cannot be closed.
hidden: Match hidden data streams and hidden indices. Must be combined with open, closed, or both.
none: Wildcard expressions are not accepted.
Values:allopenclosedhiddennone
explainboolean · default: false
If true, the response returns detailed information if an error has occurred.
ignore_unavailableboolean · default: false
If false, the request returns an error if it targets a missing or closed index.
lenientboolean · default: false
If true, format-based query failures (such as providing text to a numeric field) in the query string will be ignored.
rewriteboolean · default: false
If true, returns a more detailed explanation showing the actual Lucene query that will be executed.