# How to check unmanaged indices in Kibana watcher

**URL:** <https://discuss.elastic.co/t/how-to-check-unmanaged-indices-in-kibana-watcher/326749>\
**Category:** Kibana\
**Tags:** elastic-stack-alerting, ilm-index-lifecycle-management\
**Created:** [March 1, 2023, 10:07am UTC](https://discuss.elastic.co/t/how-to-check-unmanaged-indices-in-kibana-watcher/326749 "2023-03-01T10:07:35Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![mr\_sharma](https://avatars.discourse-cdn.com/v4/letter/m/ac8455/32.png) [@mr\_sharma](https://discuss.elastic.co/u/mr_sharma)\
**Post date:** [March 1, 2023, 10:07am UTC](https://discuss.elastic.co/t/how-to-check-unmanaged-indices-in-kibana-watcher/326749/1 "2023-03-01T10:07:36Z")

</div>

I've been trying **watcher** method in Kibana to get alerts if

- An index is unmanaged (not following any ILM policy) and it's size is more than 10GB.

I'm new to Elastic and it seems so difficult develop the watcher script for such simple use case. I've been trying different methods in watcher but no avail. We are on Elastic Enterprise.

Any help is appreciated. Thanks.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [March 2, 2023, 12:01am UTC](https://discuss.elastic.co/t/how-to-check-unmanaged-indices-in-kibana-watcher/326749/2 "2023-03-02T00:01:56Z")

</div>

Welcome to our community! 😃

> [@mr\_sharma](#):
>
> We are on Elastic Enterprise.

Do you mean you are using ECE? If so you should have access to the Support team who can help you with this.

---

<div class="post-metadata">

**Author:** ![mr\_sharma](https://avatars.discourse-cdn.com/v4/letter/m/ac8455/32.png) [@mr\_sharma](https://discuss.elastic.co/u/mr_sharma)\
**Post date:** [March 2, 2023, 12:18pm UTC](https://discuss.elastic.co/t/how-to-check-unmanaged-indices-in-kibana-watcher/326749/3 "2023-03-02T12:18:17Z")

</div>

We are using ECK. I thought of posting the question here first.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 30, 2023, 12:18pm UTC](https://discuss.elastic.co/t/how-to-check-unmanaged-indices-in-kibana-watcher/326749/4 "2023-03-30T12:18:20Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.