# How to filter all data but the index names with jq in kibana: GET \_all/\_ilm/explain | jq

**URL:** <https://discuss.elastic.co/t/how-to-filter-all-data-but-the-index-names-with-jq-in-kibana-get-all-ilm-explain-jq/371092>\
**Category:** Kibana\
**Tags:** ilm-index-lifecycle-management\
**Created:** [November 26, 2024, 4:54pm UTC](https://discuss.elastic.co/t/how-to-filter-all-data-but-the-index-names-with-jq-in-kibana-get-all-ilm-explain-jq/371092 "2024-11-26T16:54:15Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![mpniel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mpniel/32/113170_2.png) [@mpniel](https://discuss.elastic.co/u/mpniel)\
**Post date:** [November 26, 2024, 4:54pm UTC](https://discuss.elastic.co/t/how-to-filter-all-data-but-the-index-names-with-jq-in-kibana-get-all-ilm-explain-jq/371092/1 "2024-11-26T16:54:15Z")

</div>

Hello,  
How to filter all data, but the index names with jq in kibana: GET \_all/\_ilm/explain | jq .  
Only the indexes with phase : cold.

---

<div class="post-metadata">

**Author:** ![jessgarson](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jessgarson/32/129841_2.png) [@jessgarson](https://discuss.elastic.co/u/jessgarson)\
**Post date:** [November 26, 2024, 6:20pm UTC](https://discuss.elastic.co/t/how-to-filter-all-data-but-the-index-names-with-jq-in-kibana-get-all-ilm-explain-jq/371092/2 "2024-11-26T18:20:16Z")

</div>

Thanks for reaching out, @mpniel. Would something like this work:

```auto
curl -X GET "your.server.url/_all/_ilm/explain" -H 'Content-Type: application/json' | jq '.indices | to_entries[] | select(.value.phase == "cold") | .key'

```

---

<div class="post-metadata">

**Author:** ![mpniel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mpniel/32/113170_2.png) [@mpniel](https://discuss.elastic.co/u/mpniel)\
**Post date:** [November 27, 2024, 12:56pm UTC](https://discuss.elastic.co/t/how-to-filter-all-data-but-the-index-names-with-jq-in-kibana-get-all-ilm-explain-jq/371092/3 "2024-11-27T12:56:33Z")

</div>

And what is the Kibana syntax?

---

<div class="post-metadata">

**Author:** ![jessgarson](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jessgarson/32/129841_2.png) [@jessgarson](https://discuss.elastic.co/u/jessgarson)\
**Post date:** [November 27, 2024, 3:04pm UTC](https://discuss.elastic.co/t/how-to-filter-all-data-but-the-index-names-with-jq-in-kibana-get-all-ilm-explain-jq/371092/4 "2024-11-27T15:04:50Z")

</div>

Thanks for following up, @mpniel. According to the [feature request](https://github.com/elastic/kibana/issues/15850) on this subject it seems you might be able to use [ES|QL](https://www.elastic.co/blog/esql-elasticsearch-piped-query-language).

I did find this related [community blog post as well](https://medium.com/@ebuschini/how-i-elasticsearch-with-jq-e7669280773e).

---

<div class="post-metadata">

**Author:** ![mpniel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mpniel/32/113170_2.png) [@mpniel](https://discuss.elastic.co/u/mpniel)\
**Post date:** [November 27, 2024, 5:41pm UTC](https://discuss.elastic.co/t/how-to-filter-all-data-but-the-index-names-with-jq-in-kibana-get-all-ilm-explain-jq/371092/5 "2024-11-27T17:41:06Z")

</div>

Do you mean that it is not possible to get my request using jq?

---

<div class="post-metadata">

**Author:** ![jessgarson](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jessgarson/32/129841_2.png) [@jessgarson](https://discuss.elastic.co/u/jessgarson)\
**Post date:** [November 27, 2024, 7:16pm UTC](https://discuss.elastic.co/t/how-to-filter-all-data-but-the-index-names-with-jq-in-kibana-get-all-ilm-explain-jq/371092/6 "2024-11-27T19:16:39Z")

</div>

Thanks for following up, @mpniel. I'm not aware of a direct way to do this in Kibana's Dev Tools.