Nagios Support Forum

I messed up when trying to import data from a file. How do I delete the data out of the log server?

If you go to Admin -> Index Status

You can delete any or all of the daily indexes

scottwilkerson wrote:If you go to Admin -> Index Status

You can delete any or all of the daily indexes

I apologize, but all I see is a status of how many documents, total shards, and other statistics. How do I remove the data?

In the Actions column on the right you can click "delete"

Or for days other than the current day, you can check all the boxes and choose delete from the "With selected indices: " drop down on the bottom

If you only have a current day index you may need to run the following from the CLI

scottwilkerson wrote:In the Actions column on the right you can click "delete"

Or for days other than the current day, you can check all the boxes and choose delete from the "With selected indices: " drop down on the bottom

I am sorry, but I don't see an actions column. Please see my attached screenshot.

Yes, it auto-drills in to this if you only have 1 index, the following will delete that index, and then it will be re-created when the first new log comes in.

scottwilkerson wrote:If you only have a current day index you may need to run the following from the CLI

Code: Select all

curl -XDELETE localhost:9200/logstash-2018.07.19/

scottwilkerson wrote:Yes, it auto-drills in to this if you only have 1 index, the following will delete that index, and then it will be re-created when the first new log comes in.

scottwilkerson wrote:If you only have a current day index you may need to run the following from the CLI

Code: Select all

curl -XDELETE localhost:9200/logstash-2018.07.19/

Thank you, this helped.

cockraml wrote:

scottwilkerson wrote:Yes, it auto-drills in to this if you only have 1 index, the following will delete that index, and then it will be re-created when the first new log comes in.

scottwilkerson wrote:If you only have a current day index you may need to run the following from the CLI

Code: Select all

curl -XDELETE localhost:9200/logstash-2018.07.19/

Thank you, this helped.

Locking thread.