# Effect of deleting index after disk space crash

**URL:** https://discuss.elastic.co/t/effect-of-deleting-index-after-disk-space-crash/11619
**Category:** Elasticsearch
**Created:** [April 17, 2013, 7:59pm UTC](https://discuss.elastic.co/t/effect-of-deleting-index-after-disk-space-crash/11619 "2013-04-17T19:59:22Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![kaush777](https://avatars.discourse-cdn.com/v4/letter/k/43a26b/32.png) [@kaush777](https://discuss.elastic.co/u/kaush777)
#### Post date: [April 17, 2013, 7:59pm UTC](https://discuss.elastic.co/t/effect-of-deleting-index-after-disk-space-crash/11619/1 "2013-04-17T19:59:22Z")

</div>

Hi All,

Kindly forgive a very basic question.

I use Graylog + ES.

Say my disk runs out of space, crashes and I do a system reboot. Now, I  
restart ES and then graylog. On the graylog web ui, my search does not  
work and I get the error:

URI::InvalidURIError (bad URI(is not URI?): [http://localhost:9200/NOTARGET\*,-graylog2\_recent/message/\_search?from=0&size=100](http://localhost:9200/NOTARGET*,-graylog2_recent/message/_search?from=0&size=100)):

On searching the net for the above issue, I found that one of the means to  
resolve this was to stop graylog server, delete the previous elastic  
search index by say :  
curl -XDELETE localhost:9200/graylog2\_\*  
and then start graylog.

Now my question is, if I do the same, will my previous data get lost or  
not? On deleting the index, does the data get lost? If yes, how to go  
about it if I want to retain my old data?

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

### Author: ![otisg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/otisg/32/492_2.png) [@otisg](https://discuss.elastic.co/u/otisg)
#### Post date: [April 18, 2013, 12:38am UTC](https://discuss.elastic.co/t/effect-of-deleting-index-after-disk-space-crash/11619/2 "2013-04-18T00:38:37Z")

</div>

Hi,

If you are deleting your index then your old data from the index will be  
gone. If the problem is on one node then you could delete just the shard  
that's on that node and ES will make another copy of the shard from the  
replica. I'm assuming you added more disk space, but you mentioned just a  
reboot.

## Otis

ELASTICSEARCH Performance Monitoring - [Sematext Monitoring | Infrastructure Monitoring Service](http://sematext.com/spm/index.html)

On Wednesday, April 17, 2013 3:59:22 PM UTC-4, Kaushal wrote:

> Hi All,
> 
> Kindly forgive a very basic question.
> 
> I use Graylog + ES.
> 
> Say my disk runs out of space, crashes and I do a system reboot. Now, I  
> restart ES and then graylog. On the graylog web ui, my search does not  
> work and I get the error:
> 
> URI::InvalidURIError (bad URI(is not URI?): [http://localhost:9200/NOTARGET\*,-graylog2\_recent/message/\_search?from=0&size=100](http://localhost:9200/NOTARGET*,-graylog2_recent/message/_search?from=0&size=100)):
> 
> On searching the net for the above issue, I found that one of the means to  
> resolve this was to stop graylog server, delete the previous elastic  
> search index by say :  
> curl -XDELETE localhost:9200/graylog2\_\*  
> and then start graylog.
> 
> Now my question is, if I do the same, will my previous data get lost or  
> not? On deleting the index, does the data get lost? If yes, how to go  
> about it if I want to retain my old data?

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

### Author: ![kaush777](https://avatars.discourse-cdn.com/v4/letter/k/43a26b/32.png) [@kaush777](https://discuss.elastic.co/u/kaush777)
#### Post date: [April 18, 2013, 4:57pm UTC](https://discuss.elastic.co/t/effect-of-deleting-index-after-disk-space-crash/11619/3 "2013-04-18T16:57:06Z")

</div>

Thanks Otis... But I have further doubts!!!

2 questions. Again, forgive the simplicity of them:

1. Isn't a shard a Lucene instance? Then how to delete a shard?

2. I have 1 shard on graylog2\_0 node. Then which replica are we talking  
about?

On Thursday, 18 April 2013 06:08:37 UTC+5:30, Otis Gospodnetic wrote:

> Hi,
> 
> If you are deleting your index then your old data from the index will be  
> gone. If the problem is on one node then you could delete just the shard  
> that's on that node and ES will make another copy of the shard from the  
> replica. I'm assuming you added more disk space, but you mentioned just a  
> reboot.
> 
> ## Otis
> 
> ELASTICSEARCH Performance Monitoring - [Sematext Monitoring | Infrastructure Monitoring Service](http://sematext.com/spm/index.html)
> 
> On Wednesday, April 17, 2013 3:59:22 PM UTC-4, Kaushal wrote:
> 
> > Hi All,
> > 
> > Kindly forgive a very basic question.
> > 
> > I use Graylog + ES.
> > 
> > Say my disk runs out of space, crashes and I do a system reboot. Now, I  
> > restart ES and then graylog. On the graylog web ui, my search does not  
> > work and I get the error:
> > 
> > URI::InvalidURIError (bad URI(is not URI?): [http://localhost:9200/NOTARGET\*,-graylog2\_recent/message/\_search?from=0&size=100](http://localhost:9200/NOTARGET*,-graylog2_recent/message/_search?from=0&size=100)):
> > 
> > On searching the net for the above issue, I found that one of the means  
> > to resolve this was to stop graylog server, delete the previous elastic  
> > search index by say :  
> > curl -XDELETE localhost:9200/graylog2\_\*  
> > and then start graylog.
> > 
> > Now my question is, if I do the same, will my previous data get lost or  
> > not? On deleting the index, does the data get lost? If yes, how to go  
> > about it if I want to retain my old data?

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

### Author: ![kaush777](https://avatars.discourse-cdn.com/v4/letter/k/43a26b/32.png) [@kaush777](https://discuss.elastic.co/u/kaush777)
#### Post date: [April 19, 2013, 9:32am UTC](https://discuss.elastic.co/t/effect-of-deleting-index-after-disk-space-crash/11619/4 "2013-04-19T09:32:30Z")

</div>

Hi All,

I resolved the problem by deleting the alias deflector target and  
restarting the Graylog server. Can anyone tell me a bit more about what an  
alias deflector target is?

On Thursday, 18 April 2013 06:08:37 UTC+5:30, Otis Gospodnetic wrote:

> Hi,
> 
> If you are deleting your index then your old data from the index will be  
> gone. If the problem is on one node then you could delete just the shard  
> that's on that node and ES will make another copy of the shard from the  
> replica. I'm assuming you added more disk space, but you mentioned just a  
> reboot.
> 
> ## Otis
> 
> ELASTICSEARCH Performance Monitoring - [Sematext Monitoring | Infrastructure Monitoring Service](http://sematext.com/spm/index.html)
> 
> On Wednesday, April 17, 2013 3:59:22 PM UTC-4, Kaushal wrote:
> 
> > Hi All,
> > 
> > Kindly forgive a very basic question.
> > 
> > I use Graylog + ES.
> > 
> > Say my disk runs out of space, crashes and I do a system reboot. Now, I  
> > restart ES and then graylog. On the graylog web ui, my search does not  
> > work and I get the error:
> > 
> > URI::InvalidURIError (bad URI(is not URI?): [http://localhost:9200/NOTARGET\*,-graylog2\_recent/message/\_search?from=0&size=100](http://localhost:9200/NOTARGET*,-graylog2_recent/message/_search?from=0&size=100)):
> > 
> > On searching the net for the above issue, I found that one of the means  
> > to resolve this was to stop graylog server, delete the previous elastic  
> > search index by say :  
> > curl -XDELETE localhost:9200/graylog2\_\*  
> > and then start graylog.
> > 
> > Now my question is, if I do the same, will my previous data get lost or  
> > not? On deleting the index, does the data get lost? If yes, how to go  
> > about it if I want to retain my old data?

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 2:40am UTC](https://discuss.elastic.co/t/effect-of-deleting-index-after-disk-space-crash/11619/5 "2017-07-06T02:40:27Z")

</div>


