Hi,
I have a problem with delete by query. I use ES to sort my log access. I
have one index per day.
In the index of the day before, I would delete all my log access before a
specific hour.
For my query I use the plugin Head.
Here is how my data is organized:
hits: {
_index: "index"
_type: "type"
_id: "1"
_score: 2.47
_source: {
@tags: [ "XXXX" ]
@fields: {
timestamp: [ "08/Aug/2013:17:00:00 +0200" ]
ip: [ "XXXX" ]
...
}
@server: [ "XXXXX" ]
}
}
When I do
I have
{
- ok: true
- _indices: {
- index: {
- _shards: {
- total: 5
- successful: 0
- failed: 5
}
}
}
- _shards: {
- index: {
}
But if I do
It works.
So I try this method with the field "@fields.timestamp". But nothing
happens. I don't find how I can use this field.
If there isn't solution I will create a new field like server where I will
copy the field "@fields.timestamp", but I prefer dodge this solution.
Someone have a solution for my problem?
Hubert
--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.