Delete messages from GL and/or ES

Hi everyone!

We have installed a cluster of 3 Nodes of GL 2.2.3, designed for collecting Apache access logs. It has been running like a charm.

in recent days, one of our Sys Admins decompressed a lot of old access log files in the very same paths that Collectors poll for new files and messages. The result: millions of old messages going to GrayLog cluster, being processed and saved to ES cluster.

Is there a safe way to delete these messages? I`d like to save disk space and avoid redundant messages being stored.

Thanks !

depending on your rotation strategy you can drop the index that contains the old data and reindex the data you really like to have.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.