Page 1 of 1

How to delete events based on fields

Posted: Wed Dec 09, 2020 12:18 pm
by rajusys
Hi,

How can we delete events based on fields for example I want to delete all events with eventid: XXXX then is it possible to do.

Re: How to delete events based on fields

Posted: Thu Dec 10, 2020 12:11 pm
by cdienger
You would need to do it from the command line with something like this:

Code: Select all

curl -XDELETE 'http://localhost:9200/logstash-2020.12.10/_query?q=eventid:ID'