# Kibana Still Displays Data From Uninstalled Filebeat

**URL:** https://discuss.elastic.co/t/kibana-still-displays-data-from-uninstalled-filebeat/78527
**Category:** Beats
**Tags:** filebeat
**Created:** [March 14, 2017, 1:45pm UTC](https://discuss.elastic.co/t/kibana-still-displays-data-from-uninstalled-filebeat/78527 "2017-03-14T13:45:19Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![peter.alfafara](https://avatars.discourse-cdn.com/v4/letter/p/edb3f5/32.png) [@peter.alfafara](https://discuss.elastic.co/u/peter.alfafara)
#### Post date: [March 14, 2017, 1:45pm UTC](https://discuss.elastic.co/t/kibana-still-displays-data-from-uninstalled-filebeat/78527/1 "2017-03-14T13:45:19Z")

</div>

Hi,

We are currently experiencing an issue where Kibana still displays data gathered by our uninstalled Filebeat.

We initially installed Filebeat along with ElasticSearch, Kibana and Logstash. Then we decided to use Sensu as our metrics collection engine instead of Filebeat. So we uninstalled all these softwares and then we just reinstalled ElasticSearch, Kibana and Logstash. But upon configuring these 3 tools, the data gathered by the previously configured filebeat's is still displaying in Kibana.

We have used the following command to uninstall filebeat:  
_sudo apt-get --purge autoremove filebeat_

And deleted the following directories manually:  
**/etc/filebeat**  
**/var/lib/filebeat**  
**/var/log/filebeat**

Also, we are unable to delete the index of filebeat in elasticsearch.

Anything else we might have missed? Thank you.

Regards,  
Peter

---

<div class="post-metadata">

### Author: ![shaunak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaunak/32/6643_2.png) [@shaunak](https://discuss.elastic.co/u/shaunak)
#### Post date: [March 14, 2017, 3:48pm UTC](https://discuss.elastic.co/t/kibana-still-displays-data-from-uninstalled-filebeat/78527/2 "2017-03-14T15:48:50Z")

</div>

This sounds like more of a Filebeat question so I'm moving it to that category. If this turns out to be a Kibana issue, please move it back to the Kibana category.

---

<div class="post-metadata">

### Author: ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)
#### Post date: [March 16, 2017, 12:15am UTC](https://discuss.elastic.co/t/kibana-still-displays-data-from-uninstalled-filebeat/78527/3 "2017-03-16T00:15:04Z")

</div>

Uninstalling filebeat does not mean the data is removed from elasticsearch. Can you share some details on why you were not able to remove the filebeat indices?

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [March 16, 2017, 3:47pm UTC](https://discuss.elastic.co/t/kibana-still-displays-data-from-uninstalled-filebeat/78527/4 "2017-03-16T15:47:37Z")

</div>

Probably when reinstalling Elasticsearch you didn't remove the data directory so the data is still present. You can drop the indices and template with:

`curl -XDELETE http://localhost:9200/filebeat-*`  
`curl -XDELETE http://localhost:9200/_template/filebeat`

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 13, 2017, 3:47pm UTC](https://discuss.elastic.co/t/kibana-still-displays-data-from-uninstalled-filebeat/78527/5 "2017-04-13T15:47:44Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.