How to search in Kibana only indices in hot and warm phase?

Elastic Stack Kibana
1

Hello,

I would like to limit my search only on indices in hot and warm phase.
I am aware of this metadata field

but I can't see this field available in my Data View.

Any suggestions?

Thanks,
Nicoletta

2

Hi @Nicoletta,

On Discover page there is an option to create a filter with a custom Query DSL like the following:

{
  "query": {
    "terms": {
      "_tier": ["data_hot", "data_warm"] 
    }
  }
}

Or enter the following query in the search bar (it should be switched to KQL language):

_tier: (data_hot or data_warm)
3

Thanks a lot, I didn't see _tier field in my metadata fields so I thought it was not available.

It works.
Thanks again

Nicoletta