Delete log data

[cockraml]

I messed up when trying to import data from a file. How do I delete the data out of the log server?

[scottwilkerson]

If you go to Admin -> Index Status

You can delete any or all of the daily indexes

[cockraml]

If you go to Admin -> Index Status

You can delete any or all of the daily indexes

I apologize, but all I see is a status of how many documents, total shards, and other statistics. How do I remove the data?

[scottwilkerson]

In the Actions column on the right you can click "delete"

Or for days other than the current day, you can check all the boxes and choose delete from the "With selected indices: " drop down on the bottom

[scottwilkerson]

If you only have a current day index you may need to run the following from the CLI

Code: Select all

curl -XDELETE localhost:9200/logstash-2018.07.19/

[cockraml]

In the Actions column on the right you can click "delete"

Or for days other than the current day, you can check all the boxes and choose delete from the "With selected indices: " drop down on the bottom

I am sorry, but I don't see an actions column. Please see my attached screenshot.

Screen Shot 2018-07-19 at 3.19.19 PM.png

[scottwilkerson]

Yes, it auto-drills in to this if you only have 1 index, the following will delete that index, and then it will be re-created when the first new log comes in.

If you only have a current day index you may need to run the following from the CLI

Code: Select all

curl -XDELETE localhost:9200/logstash-2018.07.19/

[cockraml]

Yes, it auto-drills in to this if you only have 1 index, the following will delete that index, and then it will be re-created when the first new log comes in.

If you only have a current day index you may need to run the following from the CLI

Code: Select all

curl -XDELETE localhost:9200/logstash-2018.07.19/

Thank you, this helped.

[scottwilkerson]

Yes, it auto-drills in to this if you only have 1 index, the following will delete that index, and then it will be re-created when the first new log comes in.

If you only have a current day index you may need to run the following from the CLI

Code: Select all

curl -XDELETE localhost:9200/logstash-2018.07.19/

Thank you, this helped.

Locking thread.