# Delete data from Indices **URL:** \ **Category:** Kibana\ **Created:** [June 21, 2021, 1:06pm UTC](https://discuss.elastic.co/t/delete-data-from-indices/276540 "2021-06-21T13:06:22Z")\ **Posts on this page:** 13\ **Page:** 1
**Author:** ![danny.tveria](https://avatars.discourse-cdn.com/v4/letter/d/b4bc9f/32.png) [@danny.tveria](https://discuss.elastic.co/u/danny.tveria)\ **Post date:** [June 21, 2021, 1:06pm UTC](https://discuss.elastic.co/t/delete-data-from-indices/276540/1 "2021-06-21T13:06:22Z")
Hi, I new in ELK. Our previous sysadmin installed and configured the elk server but he getting out of space... I want to know if I can delete data from indices without reconfiguring the entire server or ELK? ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [June 21, 2021, 10:07pm UTC](https://discuss.elastic.co/t/delete-data-from-indices/276540/2 "2021-06-21T22:07:09Z")
Welcome to our community! 😃 You can use curl or [Dev Tools](https://www.elastic.co/guide/en/kibana/current/console-kibana.html) to [delete indices](https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-delete-index.html). Don't delete them on the filesystem though as it'll cause issues. Only ever use the APIs. ---
**Author:** ![danny.tveria](https://avatars.discourse-cdn.com/v4/letter/d/b4bc9f/32.png) [@danny.tveria](https://discuss.elastic.co/u/danny.tveria)\ **Post date:** [June 22, 2021, 4:23am UTC](https://discuss.elastic.co/t/delete-data-from-indices/276540/3 "2021-06-22T04:23:13Z")
Hi, But how I do it? I new on this subject, and our kina a stopped working because out of space. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [June 22, 2021, 4:27am UTC](https://discuss.elastic.co/t/delete-data-from-indices/276540/4 "2021-06-22T04:27:14Z")
If you look at the second link, it has an example that you can copy as curl. ---
**Author:** ![danny.tveria](https://avatars.discourse-cdn.com/v4/letter/d/b4bc9f/32.png) [@danny.tveria](https://discuss.elastic.co/u/danny.tveria)\ **Post date:** [June 22, 2021, 5:24am UTC](https://discuss.elastic.co/t/delete-data-from-indices/276540/5 "2021-06-22T05:24:05Z")
Hi, But it`s delete the entire index. I need to delete data from the index ![~WRD000.jpg](https://us1.discourse-cdn.com/elastic/original/3X/5/2/52d5f1c08649212fe6768d2cacdcf8df711810d9.jpeg) ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [June 22, 2021, 5:49am UTC](https://discuss.elastic.co/t/delete-data-from-indices/276540/6 "2021-06-22T05:49:22Z")
Then you need to use [delete by query](https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-delete-by-query.html), which is much more complex. ---
**Author:** ![danny.tveria](https://avatars.discourse-cdn.com/v4/letter/d/b4bc9f/32.png) [@danny.tveria](https://discuss.elastic.co/u/danny.tveria)\ **Post date:** [June 22, 2021, 6:01am UTC](https://discuss.elastic.co/t/delete-data-from-indices/276540/7 "2021-06-22T06:01:58Z")
So if I use delete from indices, how I see the indices? and how I see the data in the indices? I need to delete only old logs ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [June 24, 2021, 5:16am UTC](https://discuss.elastic.co/t/delete-data-from-indices/276540/8 "2021-06-24T05:16:45Z")
You need to pass in the indices you want the query to run against. Use the `_cat/indices?v` endpoint to check that. Once you have that you can craft a delete by query with a timerange in it to delete older events. ---
**Author:** ![danny.tveria](https://avatars.discourse-cdn.com/v4/letter/d/b4bc9f/32.png) [@danny.tveria](https://discuss.elastic.co/u/danny.tveria)\ **Post date:** [June 24, 2021, 7:20am UTC](https://discuss.elastic.co/t/delete-data-from-indices/276540/9 "2021-06-24T07:20:57Z")
Hi , I run the command `_cat/indices?v` and found the indices I need to delete from him old data. ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/7/27017432e78af1e6100f2f85e7813ab8faebf77d.png) How now I run queries to find old data? ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [June 27, 2021, 11:58pm UTC](https://discuss.elastic.co/t/delete-data-from-indices/276540/10 "2021-06-27T23:58:41Z")
Ahh yikes, a single index for that is not really ideal. It looks like it was not correctly setup. If you want to keep the last months worth of data, then use this; ```auto GET _search { "query": { "range": { "timestamp": { "gte": "now-30d/d" } } } } ``` To show that data, then use this to delete it; ```auto POST /my-index-000001/_delete_by_query { "query": { "range": { "timestamp": { "gte": "now-30d/d" } } } } ``` Where `gte` is set to 30 days ago, rounded up to the day (ie midnight). ---
**Author:** ![danny.tveria](https://avatars.discourse-cdn.com/v4/letter/d/b4bc9f/32.png) [@danny.tveria](https://discuss.elastic.co/u/danny.tveria)\ **Post date:** [June 28, 2021, 5:25am UTC](https://discuss.elastic.co/t/delete-data-from-indices/276540/11 "2021-06-28T05:25:39Z")
Hi, thanks for the answer. the way you recommended i need to install some plugin? ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [June 28, 2021, 5:33am UTC](https://discuss.elastic.co/t/delete-data-from-indices/276540/12 "2021-06-28T05:33:04Z")
Nope. I would suggest you create a new topic to dive into your setup, it sounds like we can make your life a little easier by digging into your setup and making some changes 🙂 ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 26, 2021, 5:33am UTC](https://discuss.elastic.co/t/delete-data-from-indices/276540/13 "2021-07-26T05:33:32Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.