# Unhide System Indices

**URL:** <https://discuss.elastic.co/t/unhide-system-indices/316736>\
**Category:** Elasticsearch\
**Created:** [October 17, 2022, 7:14am UTC](https://discuss.elastic.co/t/unhide-system-indices/316736 "2022-10-17T07:14:55Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ankita\_Pachauri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ankita_pachauri/32/61469_2.png) [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\
**Post date:** [October 17, 2022, 7:14am UTC](https://discuss.elastic.co/t/unhide-system-indices/316736/1 "2022-10-17T07:14:55Z")

</div>

Hi Team,  
I am using searchguard for alerting purpose. The indices of searchguard are stored in elasticsearch with .signals naming convention. I need to get the alert ID for the alerts. However, i cannot write a search query on hidden indices. Can you please support if there is some way to unhide them or to make a search query on them?

//Ankita

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [October 17, 2022, 9:02am UTC](https://discuss.elastic.co/t/unhide-system-indices/316736/2 "2022-10-17T09:02:41Z")

</div>

I think you should ask this to the searchguard support as we don't support this 3rd party plugin.

---

<div class="post-metadata">

**Author:** ![Ankita\_Pachauri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ankita_pachauri/32/61469_2.png) [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\
**Post date:** [October 17, 2022, 9:16am UTC](https://discuss.elastic.co/t/unhide-system-indices/316736/3 "2022-10-17T09:16:12Z")

</div>

Hi David,  
My question is just that if i can convert hidden indices to normal ones?

//Ankita

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [October 17, 2022, 9:30am UTC](https://discuss.elastic.co/t/unhide-system-indices/316736/4 "2022-10-17T09:30:59Z")

</div>

I have no idea. I don't know this project and if this is possible and what would be the impact...

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [October 17, 2022, 9:41am UTC](https://discuss.elastic.co/t/unhide-system-indices/316736/5 "2022-10-17T09:41:26Z")

</div>

Can you perhaps put an alias on top of it and use that?

---

<div class="post-metadata">

**Author:** ![mikewillis](https://avatars.discourse-cdn.com/v4/letter/m/b2d939/32.png) [@mikewillis](https://discuss.elastic.co/u/mikewillis)\
**Post date:** [October 17, 2022, 10:01am UTC](https://discuss.elastic.co/t/unhide-system-indices/316736/6 "2022-10-17T10:01:13Z")

</div>

There's a Search Guard forum at [https://forum.search-guard.com/](https://forum.search-guard.com/) where you could ask, if you don't have a paid for support channel to use.

---

<div class="post-metadata">

**Author:** ![Ankita\_Pachauri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ankita_pachauri/32/61469_2.png) [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\
**Post date:** [October 18, 2022, 5:33am UTC](https://discuss.elastic.co/t/unhide-system-indices/316736/7 "2022-10-18T05:33:51Z")

</div>

Hi Team,  
Thanks for your support.  
I just wanted to check that how is watcher generating the alerts? If i want to raise an alarm for breaching memory threshold and my environment includes 30 hosts, how will watcher generate the alarm?

Will it be single alarm for single host or one alarm for all hosts?

//Ankita

---

<div class="post-metadata">

**Author:** ![mikewillis](https://avatars.discourse-cdn.com/v4/letter/m/b2d939/32.png) [@mikewillis](https://discuss.elastic.co/u/mikewillis)\
**Post date:** [October 18, 2022, 8:04am UTC](https://discuss.elastic.co/t/unhide-system-indices/316736/8 "2022-10-18T08:04:32Z")

</div>

> [@Ankita\_Pachauri](#):
>
> I just wanted to check that how is watcher generating the alerts? If i want to raise an alarm for breaching memory threshold and my environment includes 30 hosts, how will watcher generate the alarm?

Those questions will probably get more views and hence be more likely to get good answers if you make a new post with an appropriate title.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 15, 2022, 8:04am UTC](https://discuss.elastic.co/t/unhide-system-indices/316736/9 "2022-11-15T08:04:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
