# Get async EQL search results

**GET /_eql/search/{id}**

Get the current status and available results for an async EQL search or a stored synchronous EQL search.


## Servers
- http://api.example.com: http://api.example.com ()


## Authentication methods
- Api key auth
- Basic auth
- Bearer auth


## Parameters

### Path parameters
- **id** (string)
  Identifier for the search.

### Query parameters
- **keep_alive** (string)
  Period for which the search and its results are stored on the cluster.
  Defaults to the keep_alive value set by the search’s EQL search API request.
- **wait_for_completion_timeout** (string)
  Timeout duration to wait for the request to finish.
  Defaults to no timeout, meaning the request waits for complete search results.


## Responses
### 200


#### Body: application/json (object)
- **id** (string)
  Identifier for the search.
- **is_partial** (boolean)
  If true, the response does not contain complete search results.
- **is_running** (boolean)
  If true, the search request is still executing.
- **took** (number)
  Milliseconds it took Elasticsearch to execute the request.
- **timed_out** (boolean)
  If true, the request timed out before completion.
- **hits** (object)
  Contains matching events and sequences. Also contains related metadata.
- **shard_failures** (array[object])
  Contains information about shard failures (if any), in case allow_partial_search_results=true


[Powered by Bump.sh](https://bump.sh)