When using Cross Cluster Search with Remote clusters, it's much preferred to use the _resolve/index
API rather than the _cat/indices
API.
The following two patterns can be used to identify both local and remote indices at the same time
- Remote:
*:*<pattern>*
- Local:
*<pattern>*
Example for .monitoring
pattern:
GET _resolve/index/*:*.monitoring*,*.monitoring*?filter_path=*.name
This would provide a much more cohesive experience for users who have no idea where the data lives.
It also provides context as to whether the found match is an "indices", "aliases" or "data_streams".