# Where are monitor definitions stored?

**URL:** https://forum.opensearch.org/t/where-are-monitor-definitions-stored/27292
**Category:** Alerting
**Created:** [October 15, 2025, 12:01am UTC](https://forum.opensearch.org/t/where-are-monitor-definitions-stored/27292 "2025-10-15T00:01:08Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![reshippie](https://avatars.discourse-cdn.com/v4/letter/r/ecd19e/32.png) [@reshippie](https://forum.opensearch.org/u/reshippie)
#### Post date: [October 15, 2025, 12:01am UTC](https://forum.opensearch.org/t/where-are-monitor-definitions-stored/27292/1 "2025-10-15T00:01:08Z")

</div>

**Versions** 2.19.2

**Describe the issue** :

I’m about to upgrade from 2.19.2 to 3.2.0 and I want to make sure to backup the monitor definitions that we have. I see that all of the notifications settings are in `.opensearch-notifications-config`, but I don’t see any special index related to monitors. I have multiple clusters, with their own unique monitors, so I’d like to find a solution beyond just downloading the JSON for every single monitor.

Where should I be looking for this data?

---

<div class="post-metadata">

### Author: ![Anthony](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/anthony/32/9939_2.png) [@Anthony](https://forum.opensearch.org/u/Anthony)
#### Post date: [October 15, 2025, 9:05am UTC](https://forum.opensearch.org/t/where-are-monitor-definitions-stored/27292/2 "2025-10-15T09:05:02Z")

</div>

@reshippie The monitors configuration is stored in system index `.opendistro-alerting-config`

You need to use admin certificate to be able to view the stored documents, see the following example command:

```auto
curl --cacert config/root-ca.pem --cert config/kirk.pem --key config/kirk-key.pem "https://localhost:9200/.opendistro-alerting-config/_search?pretty"

```

Hope this helps

---

<div class="post-metadata">

### Author: ![reshippie](https://avatars.discourse-cdn.com/v4/letter/r/ecd19e/32.png) [@reshippie](https://forum.opensearch.org/u/reshippie)
#### Post date: [October 15, 2025, 6:18pm UTC](https://forum.opensearch.org/t/where-are-monitor-definitions-stored/27292/3 "2025-10-15T18:18:27Z")

</div>

That helps a great deal.

I use Cerebro, which I know hasn’t been updated in years, mostly to check on the cluster status and node health.  
It also lists all of the indices and the # of documents in each one. I guess without the cert it can’t even get a count.

Thank you for your help and patience. I promise to start doing things with the certs before I ask more questions here.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/3/33547ea01a5b12dcca2958411d3edd97ae2ea8c1.png) [@system](https://forum.opensearch.org/u/system)
#### Post date: [December 14, 2025, 6:18pm UTC](https://forum.opensearch.org/t/where-are-monitor-definitions-stored/27292/4 "2025-12-14T18:18:38Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
