Delete specific data from all indices

I was testing beat input and i pump lots of data by mistake now i want to delete those data and not sure how do i clean up my test data from production because i have default graylog_* indices.

I want to delete all data from this input, how do i craft ELK curl query to delete any data in that input?

gl2_source_input:601627ba5928912f890070c4

This question is probably better suited for the Elasticsearch forum

Ideally, you don’t want to have to do this in your production environment. Use a staging system or at least a separate index in the future.

I was going to mention that you’re probably better off looking at Elastic’s docs to see what they have for running a delete command from an index. They provide some basic curl commands in Delete API | Elasticsearch Reference [7.10] | Elastic that you can use to tweak for your needs.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.