kibana_list_indices
Discover available Elasticsearch indices along with health, status, document count, and storage size. Use this to find index names before searching or aggregating logs.
Instructions
List available Elasticsearch indices.
Calls GET {ES_URL}/_cat/indices?format=json and returns a structured
list of indices with health, status, document count, and storage size.
Use this first to discover which index names / patterns exist before
calling kibana_search_logs or kibana_aggregate_logs.
Examples:
- Use when: "What log indices are available in Elasticsearch?"
→ default params, pattern='*'.
- Use when: The user mentions a service name but not the index.
Try pattern='logs-myservice-*' to narrow down.
- Use when: "How many documents in the access-log index?"
→ pattern='access-log*', check docs_count.
- Don't use when: You already know the index name — pass it directly
to kibana_search_logs (saves one round trip).
- Don't use when: You need to search log content — that's
kibana_search_logs.
Returns:
dict with keys indices_count / pattern / include_system /
indices (list of {index, health, status, docs_count, store_size_bytes, size_human}).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| pattern | No | Index name or pattern to filter results (e.g. 'logs-*', 'filebeat-*'). Supports Elasticsearch wildcard syntax. Default '*' lists all non-system indices. | * |
| include_system | No | Whether to include system/internal indices. Hidden by default: any prefix in {'.', 'kibana', 'ilm-history', 'shrink-'} — covers Kibana internals, ILM history, and shrunk index leftovers. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| indices_count | Yes | ||
| pattern | Yes | ||
| include_system | Yes | ||
| indices | Yes |