# Index/alias Filter(s)

**URL:** <https://discuss.elastic.co/t/index-alias-filter-s/325851>\
**Category:** Kibana\
**Created:** [February 17, 2023, 2:35pm UTC](https://discuss.elastic.co/t/index-alias-filter-s/325851 "2023-02-17T14:35:49Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Talvaro](https://avatars.discourse-cdn.com/v4/letter/t/51bf81/32.png) [@Talvaro](https://discuss.elastic.co/u/Talvaro)\
**Post date:** [February 17, 2023, 2:35pm UTC](https://discuss.elastic.co/t/index-alias-filter-s/325851/1 "2023-02-17T14:35:49Z")

</div>

I'm researching an issue with a existing application I just got as responsible. I am not too familiar with Elastic/Kibana. The issue is the application reading docs from an Alias is not getting all expected results. I noticed by executing a "GET \_cat/aliases/?v=true&s=alias,index" that the alias or perhaps the indexes grouped by the alias have "filters" (an asterisk in next to the Index name - under column "filter". My question is: how can I visualize what is the filter setting (what has been filtered out form the index/alias). ANy help will be greatly appreciated!!!!!

---

<div class="post-metadata">

**Author:** ![Wave](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wave/32/117242_2.png) [@Wave](https://discuss.elastic.co/u/Wave)\
**Post date:** [February 17, 2023, 2:50pm UTC](https://discuss.elastic.co/t/index-alias-filter-s/325851/2 "2023-02-17T14:50:48Z")

</div>

Hi Talvaro,  
You might have already found this [documentation about alias filters](https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-aliases.html#indices-aliases-api-request-body), but if not it could be helpful. I believe the "asterisk" means that a filter is present. So you'll need to do an additional query to see exactly what the filter is doing. Try (after replacing your\_alias\_name\_here with the alias in question):

```auto
GET _alias/your_alias_name_here

```

That should probably give a better idea of what is being filtered.

---

<div class="post-metadata">

**Author:** ![Talvaro](https://avatars.discourse-cdn.com/v4/letter/t/51bf81/32.png) [@Talvaro](https://discuss.elastic.co/u/Talvaro)\
**Post date:** [February 17, 2023, 3:03pm UTC](https://discuss.elastic.co/t/index-alias-filter-s/325851/3 "2023-02-17T15:03:59Z")

</div>

Yes, @Wave , I just found out. The filter is defined as:  
"filter" : {  
"range" : {  
"payloadAttributes.processTimeStamp" : {  
"gte" : "now-30d/d",  
"lte" : "now/d"  
}

Now the question is: how to modify it? I would like to eliminate the "lte" since I think this is letting most recent Docs out of the intentioned request.

THANKS!!!!!

---

<div class="post-metadata">

**Author:** ![Wave](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wave/32/117242_2.png) [@Wave](https://discuss.elastic.co/u/Wave)\
**Post date:** [February 17, 2023, 5:52pm UTC](https://discuss.elastic.co/t/index-alias-filter-s/325851/4 "2023-02-17T17:52:59Z")

</div>

You're welcome. You should be able to change the filter by including it in the add section. Just keep the same index names and alias name and you should be good to go. I'd recommend saving a copy of the output of the alias before making changes if you haven't already.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 17, 2023, 5:53pm UTC](https://discuss.elastic.co/t/index-alias-filter-s/325851/5 "2023-03-17T17:53:53Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.