Deleting logs with common entry in it

I want to delete the logs from elastic search which is having "tags.raw=alkd3".

here tags is a field which will help in differentiating different webserver .

name of the index is access logs

I hope you are not going to DELETE too many documents. Otherwise, reindexing might be better.

Anyway, Delete By Query is probably what you are looking for:

I explored and found this code
curl -XDELETE ' name/_query' -d '

"query": {
"filtered" : {
"query" : {
"term" : { "field name" : "value" }



it worked for me

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.