# Missing documents in opendistro alerting indexes

**URL:** <https://forum.opensearch.org/t/missing-documents-in-opendistro-alerting-indexes/4511>\
**Category:** Alerting\
**Created:** [January 5, 2021, 3:12pm UTC](https://forum.opensearch.org/t/missing-documents-in-opendistro-alerting-indexes/4511 "2021-01-05T15:12:03Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![empirium](https://avatars.discourse-cdn.com/v4/letter/e/ecc23a/32.png) [@empirium](https://forum.opensearch.org/u/empirium)\
**Post date:** [January 5, 2021, 3:12pm UTC](https://forum.opensearch.org/t/missing-documents-in-opendistro-alerting-indexes/4511/1 "2021-01-05T15:12:03Z")

</div>

Hi  
Is there any reason why I do not see any documents in opendistro alerting indexes such as  
.opendistro-alerting-alerts  
.opendistro-alerting-config  
.opendistro-alerting-config  
etc

I have already created some monitors and have working alerts but do not see any data in these indexes. I’m using admin account, do I miss any additional permissions?

Thanks for the answer

---

<div class="post-metadata">

**Author:** ![skkosuri-amzn](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/skkosuri-amzn/32/935_2.png) [@skkosuri-amzn](https://forum.opensearch.org/u/skkosuri-amzn)\
**Post date:** [January 25, 2021, 4:40am UTC](https://forum.opensearch.org/t/missing-documents-in-opendistro-alerting-indexes/4511/2 "2021-01-25T04:40:32Z")

</div>

@empirium Those indices are marked hidden. Try this:  
`curl "https://localhost:9200/_cat/indices?expand_wildcards=all" -u <user>:<passwd> --insecure`

---

<div class="post-metadata">

**Author:** ![thepich](https://avatars.discourse-cdn.com/v4/letter/t/8e8cbc/32.png) [@thepich](https://forum.opensearch.org/u/thepich)\
**Post date:** [February 7, 2021, 6:42pm UTC](https://forum.opensearch.org/t/missing-documents-in-opendistro-alerting-indexes/4511/3 "2021-02-07T18:42:21Z")

</div>

Hi, I have the same problem here,

I was able to create index pattern .opendistro-alerting-\* and monitors.  
In Index Management, I can see that there is documents in it everytime a monitor gets triggered,  
But i am not able to access it through the Discover feature.

I have the default admin account to test this, and I could see that I need an admin certificate.  
But even after creating one, I couldn’t access anything…

Anything I am missing here ? About roles or permissions ?
