Deleting documents based on timestam

Elastic Stack Elasticsearch
1

Hello Experts,

I want to delete some events based on time stamp, below once is the time stamp of an server event which unnecessarily pushed same data multiple times with in a minute, for a minute single time stamp with doc is enough and need to delete others.

2016-10-21T15:44:02.8364001
2016-10-21T15:44:13.8364025
2016-10-21T15:44:23.8364050
2016-10-21T15:44:45.8364052
2016-10-21T15:44:59.8364082

Hepl me to resolve this.

2

You could just search for these particular timestamps, get the ids of the documents that you want to remove and then delete them by id.

3

Thank u Adrien,

for fewer events i can search and delete but i have 1000's of events like this and because of this excess documents my index size is getting bigger. is it possible to pick a single timestamp and remove others.. ?

4

Maybe you could automate the process using scipting?

5

yes am trying via API/CURL but can not filter a single timestamp from multiple, for this i can differentiate timestamp with their seconds interval and keep any one record and delete others is difficult.

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.