# Delete unknown sidecar entries from graylog UI

**URL:** <https://community.graylog.org/t/delete-unknown-sidecar-entries-from-graylog-ui/36184>\
**Category:** Graylog Central (peer support)\
**Created:** [August 7, 2025, 1:04pm UTC](https://community.graylog.org/t/delete-unknown-sidecar-entries-from-graylog-ui/36184 "2025-08-07T13:04:24Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![I\_am\_winner](https://avatars.discourse-cdn.com/v4/letter/i/c0e974/32.png) [@I\_am\_winner](https://community.graylog.org/u/I_am_winner)\
**Post date:** [August 7, 2025, 1:04pm UTC](https://community.graylog.org/t/delete-unknown-sidecar-entries-from-graylog-ui/36184/1 "2025-08-07T13:04:24Z")

</div>

I want to delete all unknown sidecar entries in GraylogUI 6.0. I didn’t see any option in UI to delete the same. Is there any way to delete them through API?

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/d/f/df0307443d412b435c4c5a8b4ef20842ec6d2ae8.png)

---

<div class="post-metadata">

**Author:** ![Joel\_Duffield](https://avatars.discourse-cdn.com/v4/letter/j/71c47a/32.png) [@Joel\_Duffield](https://community.graylog.org/u/Joel_Duffield)\
**Post date:** [August 7, 2025, 3:05pm UTC](https://community.graylog.org/t/delete-unknown-sidecar-entries-from-graylog-ui/36184/2 "2025-08-07T15:05:59Z")

</div>

I don’t think there is a command to delete manually, however you can lower the timeout to when they will automatically expire, and that will purge them. You can change that in System\>Configuration\>Sidecar

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/9/b/9bb028fe5e0524f17283672497265b29393ec6a2.png)

I have noticed sometimes that if you aren’t noticing them being deleted after that expiration that if you restart the Graylog service, it will force that delete.

---

<div class="post-metadata">

**Author:** ![I\_am\_winner](https://avatars.discourse-cdn.com/v4/letter/i/c0e974/32.png) [@I\_am\_winner](https://community.graylog.org/u/I_am_winner)\
**Post date:** [August 7, 2025, 5:17pm UTC](https://community.graylog.org/t/delete-unknown-sidecar-entries-from-graylog-ui/36184/3 "2025-08-07T17:17:54Z")

</div>

Thanks for your reply. Is Inactive and Unknown both are same? because in the sidecar configuration I can see Inactive threshold field but didn’t find any for Unknown ones.

---

<div class="post-metadata">

**Author:** ![Joel\_Duffield](https://avatars.discourse-cdn.com/v4/letter/j/71c47a/32.png) [@Joel\_Duffield](https://community.graylog.org/u/Joel_Duffield)\
**Post date:** [August 7, 2025, 5:48pm UTC](https://community.graylog.org/t/delete-unknown-sidecar-entries-from-graylog-ui/36184/4 "2025-08-07T17:48:13Z")

</div>

I think they generally mean the same thing, the status is unknown, which counts as it is inactive (ie offline)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [August 21, 2025, 5:48pm UTC](https://community.graylog.org/t/delete-unknown-sidecar-entries-from-graylog-ui/36184/5 "2025-08-21T17:48:34Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.