Here eHere some hints how to query elasticSearch from your web browser
...
filter (&q=<feld>:<wert>)
IF you wnat want to filter the objects you can use the function "&q=" e.g. filter attribute "status" for content "11":
...
http://172.17.2.91:9200/workflow/_search?pretty&size=100&q=status:(NOT DENIED)
boolean expression
You can use boolean expression to define a more complex query (use "\" to escape blanks in attribute names like "Object Name"):
nodes (_node/os?pretty)
If you want to see how many nodes and cpu's are used by ES
http://172.17.2.91:9200/_nodes/os?pretty
index statistics (/<index>/_stats?pretty)
if you need statistics about your index you can use this command like
acd30.skypro.ch:3191/elasticsearch/audit*/_stats?pretty
index catalog (/_cat)
To see the catalog of all indexes with count and size (v=true to show column header):
https://sdeb-idmas-q005.sys.schwarz:3190/elasticsearch/_cat/indices/*?v=true
From version 3.x use Audit Proxy Port
Starting with version 3.x you can use the Audit Proxy using the elasticsearch endpoint to search within specific indexes.
e.g. searching a specific CN with a report index
https://acd30.skypro.ch:3190/elasticsearch/report-default-2021.09.09/_search?pretty&q=cn:1000057376
TTL
To test TTL, you should know that you cannot view the TTL field value. You need to explicitly ask for it with body request parameter fields. Look at this articel
https://makina-corpus.com/blog/metier/2015/elasticsearch-how-to-test-working-ttl-documents