Delete data from index based on log.file.path

Elastic Stack Elasticsearch
1

Team,
Is there a way to delete all data that is read from a specific folder?
For example, I would like to delete all data that was indexed from the logs in folder /home/will/logs. This folder name is found in the field log.file.path from the index filebeat-7.5.0-2019.12.07-000001.

Thanks - Will

2

You may want to take a look at the Delete by Query API and selecting documents that have your path set.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.