# Removing decommissionned nodes from Monitoring?

**URL:** https://discuss.elastic.co/t/removing-decommissionned-nodes-from-monitoring/125493
**Category:** Elasticsearch
**Created:** [March 25, 2018, 3:11pm UTC](https://discuss.elastic.co/t/removing-decommissionned-nodes-from-monitoring/125493 "2018-03-25T15:11:23Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![omeugdoj](https://avatars.discourse-cdn.com/v4/letter/o/b77776/32.png) [@omeugdoj](https://discuss.elastic.co/u/omeugdoj)
#### Post date: [March 25, 2018, 3:11pm UTC](https://discuss.elastic.co/t/removing-decommissionned-nodes-from-monitoring/125493/1 "2018-03-25T15:11:23Z")

</div>

I have a few Logstash instances running, and I decommissioned one a few days ago. It will never go back online as I don't need it anymore.

But it still appears in Monitoring in Kibana via XPack. How can I remove it from Monitoring altogether?

Using 6.2.3

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [March 25, 2018, 5:09pm UTC](https://discuss.elastic.co/t/removing-decommissionned-nodes-from-monitoring/125493/2 "2018-03-25T17:09:30Z")

</div>

Once the time interval you are looking at in Kibana no longer contains data from the removed Logstash instance, it will no longer show up.

---

<div class="post-metadata">

### Author: ![rcowart](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rcowart/32/88091_2.png) [@rcowart](https://discuss.elastic.co/u/rcowart)
#### Post date: [March 26, 2018, 8:17am UTC](https://discuss.elastic.co/t/removing-decommissionned-nodes-from-monitoring/125493/3 "2018-03-26T08:17:06Z")

</div>

You can simply delete the data from the monitoring indices. This can be done easily using [\_delete\_by\_query](https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-delete-by-query.html) in the Dev Tools Console.

I would recommend performing a query first, and when you are happy it is returning the data you want to delete, use that query with `_delete_by_query`

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 23, 2018, 8:17am UTC](https://discuss.elastic.co/t/removing-decommissionned-nodes-from-monitoring/125493/4 "2018-04-23T08:17:23Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
