Skip to content

Ingest your first data

Use a non-production test index and a user that can create and read that index. Do not paste production secrets or sensitive data into a tutorial request.

Create a test document

  1. Confirm that you can reach the Elasticsearch URL.
  2. Set the endpoint without including credentials:

    export ELASTICSEARCH_URL="https://<elasticsearch-hostname>"
    
  3. Index one synthetic document:

    curl --fail-with-body --user "<user>" \
      --request POST \
      "${ELASTICSEARCH_URL}/docs-validation/_doc?refresh=wait_for" \
      --header "Content-Type: application/json" \
      --data '{
        "@timestamp": "2026-07-28T00:00:00Z",
        "message": "documentation validation event",
        "environment": "test"
      }'
    
  4. Enter the password through the client prompt or an approved secret mechanism.

  5. Confirm that the response reports a successful create or update result.

Search for the document

curl --fail-with-body --user "<user>" \
  "${ELASTICSEARCH_URL}/docs-validation/_search?q=environment:test"

Confirm that the response contains the validation event.

Clean up

Delete the test index after validation:

curl --fail-with-body --user "<user>" \
  --request DELETE \
  "${ELASTICSEARCH_URL}/docs-validation"

If the request is rejected, verify the user's index privileges. Do not solve a permission error by giving the user broad cluster-administrator access.

For production use, choose a data onboarding path, then follow the observability or search tutorial. Validate every selected integration against the deployed Elastic version.