Ingest
Ingest events
Primary structured ingest endpoint. Accepts only a top-level JSON array of event-envelope objects.
- Each item must contain event plus optional time, source, sourcetype, host, index, and fields.
- Use /ingest/raw for newline-delimited text or NDJSON.
- Use /es/_bulk for Elasticsearch bulk payloads.
post/ingest
Request body
Example request
[
{
"event": "request completed",
"source": "api",
"host": "web-01",
"fields": {
"level": "info",
"duration_ms": 45
}
}
]Response
All events accepted