Delete a single message from graylog

[samkh]

Hello,
i want to delete a single message from graylog. i have searched alot but i did not find a way to do that.
what i found is, that i can delete the message from elasticsearch cluster with curl:

curl -XDELETE 'http://localhost:9200/graylog_27/message/message_id 

the “graylog_27” is the last index, so i do not need to set the following:

curl -XPUT 'http://localhost:9200/graylog_27/_settings' -d '{
   "index" : {
      "blocks.write" : false
   }
}'

but this does not work for me
Elasticsearch version is: “7.17.5”

3. What steps have you already taken to try and solve the problem?

when i use
curl -XDELETE 'http://localhost:9200/graylog_27/message/message_id
i get the following output:
curl -XDELETE 'http://localhost:9200/graylog_27/message/message_id
{“_index”:“graylog_27”,“_type”:“message”,“_id”:“message_id”,“found”:false}

can somebody give me a hint, why this does not work.

[drewmiranda-gl (Drew Miranda)]

Elasticsearch version is: “7.17.5”

not 100% related to your question but be advised that this is an unsupported version of elasticsearch. The latest supported version is 7.10.2. We strongly recommend you migrate to OpenSearch as elasticsearch support has been depricated.

When you run curl -XDELETE 'http://localhost:9200/graylog_27/message/message_id are you substituting in the correct index name and message id from the message?

[samkh]

Hello,
yeah i use the right index and the right message id but it still not work.