AuthThe Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats.AvailabilityExperimental since 9.5This functionality is experimental and is not ready for production usage. Experimental features may change or be removed at any time. Elastic will work to fix any issues, but experimental features are not subject to the support SLA of official GA features. Specific Support terms apply.Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments.This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.
Returns one or more datasets used in ES|QL data federation.
A concrete-name miss returns 404; a wildcard pattern or list-all request with no match
returns 200 with an empty array.
The URI that identifies the data to read, resolved against the referenced data source.
It can include glob patterns, for example a recursive pattern that matches
Parquet files under s3://logs-bucket/access.
descriptionstring
A free-text description.
settingsmapstring to object
Format- and parsing-specific settings that configure how the resource is read.
Common keys include format and partition_detection. Additional keys depend on the format reader;
compression can be inferred from the resource URI.
mappingsobject
The user-declared mapping on the dataset definition.
dynamicenum · default: true
The policy for columns that are not declared in properties.
true (the default) infers undeclared columns and overlays the declarations; false makes the declaration the entire schema, so undeclared columns are not queryable.
Values:truefalse
propertiesmapstring to object
The per-column declarations, keyed by logical column name.
<string>object
typestringrequired
The declared column type.
rename_fromstring
The underlying file column that this logical column reads from.
This is a read-path rename: the physical column becomes this single logical column.
Responses always use rename_from. path, the former name for this field, is still
accepted in requests and means the same thing.
formatstring
The date-parse pattern for a declared date column, mirroring the index date-field format.
_idobject
The _id meta-field configuration, sourcing the document identity from a column.
pathstringrequired
The name of the column that provides the document identity.