Hi,
Have been trying ELK for a while now...still not in production and a lot of things aren't working. I've a feeling that something is a bit screwy. I have stopped everything send data to my ELK stack and cleared all indices, yet there is still 11GB of data in my Data drive, 30GB in Elasticsearch\logs and 4GB in logstash\logs.
I don't want to wipe the system and rebuild it, but...is there away to clear ALL data and logs?
I have backed up and documented everything
Thanks
How did you clear the data ?
From Dev Tools DELETE /indexname-*
What gives:
GET _cat/indices?vhealth status index uuid pri rep docs.count docs.deleted store.size pri.store.size
yellow open %{[@metadata][beat]}-2017.11.13 iNZf01aAS6qyVP_0iQth1g 5 1 92615 0 205.1mb 205.1mb
yellow open %{[@metadata][beat]}-2017.11.07 jvaoD-AeSfy274i-0TRC2Q 5 1 85465 0 187.9mb 187.9mb
yellow open %{[@metadata][beat]}-2017.12.04 jIp1JL2WRKeoSbD6da5niQ 5 1 91113 0 201.2mb 201.2mb
yellow open %{[@metadata][beat]}-2017.11.06 sxwQzuXEQ6-S6XIscxKUvw 5 1 89736 0 197.9mb 197.9mb
yellow open %{[@metadata][beat]}-2017.12.14 615aj5bDQTOB0jdJgiIorg 5 1 34176 0 75.7mb 75.7mb
yellow open %{[@metadata][beat]}-2017.11.27 LKmqBID-QruP2YQqAkabBg 5 1 96486 0 213.7mb 213.7mb
yellow open %{[@metadata][beat]}-2017.11.23 Yi3l9eGETUKLRHgR9ZCkdA 5 1 84368 0 185.9mb 185.9mb
yellow open %{[@metadata][beat]}-2017.11.15 TL1hp9nBQ7KguCANOPxgoA 5 1 87392 0 193.7mb 193.7mb
yellow open %{[@metadata][beat]}-2017.12.07 0t80ZW7aTZqeLmJu8TeihA 5 1 79622 0 176.7mb 176.7mb
yellow open %{[@metadata][beat]}-2017.11.22 FEi0LtzRRremOB4jV6HZcQ 5 1 93766 0 208.2mb 208.2mb
yellow open %{[@metadata][beat]}-2017.12.10 TYnXu43uQLyqpkFmbj60CA 5 1 36178 0 74.2mb 74.2mb
yellow open %{[@metadata][beat]}-2017.11.20 Q775nk2RSJSMFzsESuS_nA 5 1 91215 0 203.9mb 203.9mb
yellow open %{[@metadata][beat]}-2017.11.03 grpNlNApSr6zkDMQv7gvxg 5 1 72446 0 160.7mb 160.7mb
yellow open %{[@metadata][beat]}-2017.11.19 c48gxyQ8QWC7cbdN0cb_qA 5 1 26105 0 56.2mb 56.2mb
yellow open %{[@metadata][beat]}-2017.11.12 qMkAUWvWSvipouEZ1APYbQ 5 1 32997 0 68.9mb 68.9mb
yellow open %{[@metadata][beat]}-2017.12.02 lNBZ8MjcRXuOPaf0hXZD_Q 5 1 30345 0 64.8mb 64.8mb
yellow open %{[@metadata][beat]}-2017.12.13 7MxL4O5OT7O4-nfUdoOb9w 5 1 80652 0 177.2mb 177.2mb
yellow open %{[@metadata][beat]}-2017.11.05 sog_dktBRKeTXXlIgBEMbg 5 1 25745 0 55.1mb 55.1mb
yellow open %{[@metadata][beat]}-2017.12.08 uTkMI8DhTPOb3wzFusGTJw 5 1 66292 0 145.3mb 145.3mb
yellow open %{[@metadata][beat]}-2017.11.16 3Q5Pp-whRueLA1IunAS39A 5 1 85775 0 190.2mb 190.2mb
yellow open %{[@metadata][beat]}-2017.11.26 wwuvbI9tSVa80uaIJaJ6eg 5 1 36533 0 76.4mb 76.4mb
yellow open %{[@metadata][beat]}-2017.12.09 54agYnTXR2ak3QkL1FCT8Q 5 1 39425 0 81.1mb 81.1mb
yellow open %{[@metadata][beat]}-2017.11.28 ceu5zrVlT3GKSA_jVbI2NQ 5 1 88267 0 194.2mb 194.2mb
yellow open %{[@metadata][beat]}-2017.11.08 zvfP6cNnRLKrpeThkwzYfg 5 1 92944 0 205mb 205mb
yellow open %{[@metadata][beat]}-2017.12.12 Lb0PP0rbTbOyooJgbju4tA 5 1 96499 0 212.1mb 212.1mb
yellow open %{[@metadata][beat]}-2017.11.04 FF2LCI_ES0achUUzDXOrMg 5 1 28561 0 60.7mb 60.7mb
yellow open %{[@metadata][beat]}-2017.11.24 DOYjJn3nQAG6yHNrd4jx-g 5 1 93084 0 205.7mb 205.7mb
yellow open %{[@metadata][beat]}-2017.12.03 _X3GsYtHQUCZpSfTwVUGew 5 1 30314 0 64.4mb 64.4mb
yellow open %{[@metadata][beat]}-2017.11.30 Dgy2-1rdRYajohJRtP0Trg 5 1 84127 0 185.1mb 185.1mb
yellow open %{[@metadata][beat]}-2017.11.21 fRzH0h71QvCTHV-4ZAlB9g 5 1 90042 0 197.3mb 197.3mb
yellow open %{[@metadata][beat]}-2017.11.29 88ynr-T_QW2sRvKV_kAILg 5 1 92624 0 205.6mb 205.6mb
yellow open %{[@metadata][beat]}-2017.11.17 SSVEbSLLQbyuFII-VZK_aQ 5 1 68993 0 154.6mb 154.6mb
yellow open %{[@metadata][beat]}-2017.11.11 81nLTsfLTYKg84VT6wrjMw 5 1 30383 0 63.2mb 63.2mb
yellow open .kibana bmaQROToQwah_0I4U6lsww 1 1 26 11 128.5kb 128.5kb
yellow open %{[@metadata][beat]}-2017.12.11 NtwxshR7TDmvAqNnS5gugQ 5 1 98371 0 216.7mb 216.7mb
yellow open %{[@metadata][beat]}-2017.11.10 _mDBiGNaRxOwx8FJ3m3sAg 5 1 77133 0 171.6mb 171.6mb
yellow open %{[@metadata][beat]}-2017.12.01 pSP6aNkMT4Gz50S_eMWaPw 5 1 77379 0 171mb 171mb
yellow open %{[@metadata][beat]}-2017.12.05 ozRYeaH3T-uWSIq7p_Cuyw 5 1 81427 0 178.4mb 178.4mb
yellow open %{[@metadata][beat]}-2017.11.01 XL7_nJ3-RtO0qfWtKu7qZQ 5 1 28712 0 63.7mb 63.7mb
yellow open %{[@metadata][beat]}-2017.11.14 F59YQanTRCauCBLptd1mqQ 5 1 100135 0 221.3mb 221.3mb
yellow open %{[@metadata][beat]}-2017.11.25 3zUmei9LSKSprkRf7dSJdQ 5 1 32676 0 68.6mb 68.6mb
yellow open %{[@metadata][beat]}-2017.11.18 sQnKGNhvQt-Znqi7dqeGdA 5 1 26405 0 56.2mb 56.2mb
yellow open %{[@metadata][beat]}-2017.12.06 j2t3TMHhQaau9rozeAKDEA 5 1 87692 0 192.8mb 192.8mb
yellow open %{[@metadata][beat]}-2017.11.09 l_PghvHrSn-jJgatOdJ6Zw 5 1 83449 0 186.2mb 186.2mb
yellow open %{[@metadata][beat]}-2017.11.02 UTcpTynaTkWTfLWH_Lj-iA 5 1 81454 0 178.1mb 178.1mb
You have some remaining indices. All the %{[@metadata][beat]}-*...
No more indexname-* index so all is good.
BTW you have a very strange naming like for %{[@metadata][beat]}-2017.11.02. Probably you have a misconfiguration.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.