Hi Trying to clear all data belonging to a particular beat host. Started with the following query: curl -XGET 'localhost:9200/filebeat-2017.05.10/_search?pretty' -H 'Content-Type: application/json' -d '{"query":{"filtered":{"query":{"query_string":{"query":"(beat.hostname:$BEAT_HOSTNAME)"}}}}}', w…

Delete All ES 2.4.1 Data for a Given filebeat Host

anhlqn (Anh) May 11, 2017, 5:51am 2

Looks like you are using the wrong syntax for delete by query plugin. It should be _query instead of _search. Check out https://www.elastic.co/guide/en/elasticsearch/plugins/2.4/delete-by-query-usage.html

Topic		Replies	Views
How to delete event data in elastic search Elasticsearch	6	1577	July 5, 2017
Elasticsearch data delete Elasticsearch	9	1051	July 5, 2017
Delete by query with plugin not work for me Elasticsearch	10	3392	July 5, 2017
How do I delete logstash data by query Elasticsearch	4	2614	July 6, 2017
Delete data by beat.name Elasticsearch	13	1640	November 8, 2018