Execution requires
streams.query; system telemetry queries may use sys.telemetry.read. Send
Accept: application/x-ndjson to return one object per row followed by a __meta__ record. Send
Prefer: respond-async to receive a 202 search job instead. Enterprise Edition can add
?clusters=local,remote-name for federated search.