Module search 

Ad hoc data search: ES|QL and Query DSL.

Modules

dataview

Kibana data-view resolution and the default alerts index.

dsl

Query DSL responses and PIT + search_after pagination.

esql

ES|QL responses and the sync/async /_query runners.

Structs

SearchRequest

Functions

has_source

prepend_from

resolve_dsl_index

Resolve a DSL search’s index: --index wins, then --data-view, then the space’s default alerts index.

resolve_esql_query

Resolve an ES|QL query’s source: --index wins, then --data-view, then the query’s own source, then the space’s default alerts index.

rewrite_from

Rewrite an ES|QL query’s source to pattern, used when --index or --data-view is given. A leading FROM <source> becomes FROM <pattern> with any | … pipeline kept; ROW/SHOW/METRICS pass through untouched; a query with no source command gets FROM <pattern> prepended.