...
http://172.17.2.91:9200/workflow/_search?pretty&size=100&q=status:(NOT DENIED)
boolean expression
You can use boolean expression to define a more complex query (use "\" to escape blanks in attribute names like "Object Name"):
nodes (_node/os?pretty)
If you want to see how many nodes and cpu's are used by ES
...