OpenSearch REST API overview

Logit.io runs OpenSearch on Logs stacks and on dedicated OpenSearch stacks. Both expose the same REST paths as self-hosted OpenSearch — search, index documents, manage templates, check health — at https://{stack-id}-es.logit.io. Authentication and connection details are Logit-specific; request and response formats follow OpenSearch's API reference (opens in a new tab).

Stack typeConnection guidePlaceholders in signed-in docs
LogsConnect to Your Cluster@opensearch.*
OpenSearchConnect to Your Cluster@opensearch.*

Before calling any API, copy your endpoint, credentials, and ports (443 or 9200) from Settings → Endpoints.

How requests are formed

Every API call follows this pattern:

{method} https://{stack-id}-es.logit.io:{port}/{opensearch-api-path}

Append authentication on every request:

  • API key mode?apikey={your-stack-api-key} query parameter
  • Basic mode — HTTP Basic auth with username = stack ID, password = stack API key

See Managed Stack Limitations for operations that may not be available on a hosted stack.

Match your OpenSearch version

OpenSearch API behaviour can differ between major versions. Check the OpenSearch version on your stack (Settings → OpenSearch or the stack summary), then use the matching docs where possible:

https://docs.opensearch.org/docs/{version}/api-reference/

If unsure, the latest API reference (opens in a new tab) is a reasonable default.

Core API families

OpenSearch groups REST APIs into families. The table below lists those most relevant on Logit.io Logs stacks, with a Logit guide (where we have one) and the upstream specification.

API familyCommon use on Logit.ioLogit guideUpstream reference
SearchQuery logs, scroll exports, countsSearch APIsSearch APIs (opens in a new tab)
DocumentIndex, update, delete documents; bulk ingestDocument APIsDocument APIs (opens in a new tab)
IndexTemplates, mappings, aliases, create/delete indexesIndex & Template APIsIndex APIs (opens in a new tab)
CATQuick tabular cluster/index summariesCluster & CAT APIsCAT APIs (opens in a new tab)
ClusterHealth checks, read cluster stateCluster & CAT APIsCluster APIs (opens in a new tab)
SnapshotBackup/restoreContact support — snapshots are platform-managedSnapshot APIs (opens in a new tab)
SecurityUsers, roles, permissionsNot exposed for stack API access — use Dashboards and account rolesSecurity APIs (opens in a new tab)
IngestIngest pipelinesUsually managed via Logstash on Logit.ioIngest APIs (opens in a new tab)

Plugin and advanced APIs

These APIs exist on OpenSearch but are less commonly called directly against {stack-id}-es.logit.io on Logs stacks. Use OpenSearch Dashboards or contact support if you need them.

APIUpstream referenceNotes
AlertingAlerting API (opens in a new tab)Prefer OpenSearch Alerting in Dashboards
Index State Management (ISM)ISM API (opens in a new tab)Retention is typically configured via your Logit.io plan
Anomaly detectionAnomaly detection API (opens in a new tab)Dashboards UI
ScrollScroll API (opens in a new tab)Covered in Search APIs and Export Data to CSV
Point in Time (PIT)PIT API (opens in a new tab)Deep pagination alternative to scroll
Multi-searchMulti-search (opens in a new tab)Batch multiple searches in one request

Logit guides and cookbooks

TaskGuide
Connect and authenticateConnect to Your Cluster
Search and export logsSearch APIs, Export Data to CSV
Query from PythonQuerying with Python
View templates and mappingsIndex & Template APIs, Index templates
Reindex dataReindexing
Monitor cluster healthCluster & CAT APIs
What you cannot do via APIManaged Stack Limitations

OpenSearch Dashboards API (separate)

The stack OpenSearch API (-es.logit.io) is not the same as the OpenSearch Dashboards API. Dashboards uses Profile proxy credentials via kibana.logit.io. See Access OpenSearch Dashboards features via REST API.