That looks something like this for me : curl -XDELETE 'http://127.0.0.1:9200/graylog2_*/message/_query' -d ' { "query_string" : { "default_field" : "host", "query" : "HOSTNAME" } }'
2014/1/16 Kay Röpke <[email protected]> > Hi! > > You mean the ones listed on the "Sources" page? > Those are calculated from the messages in the current indices. Based on > your retention settings the hosts listed there will eventually go away. > > Graylog2 currently doesn't have a method to delete data, if you really > have to get rid of it, going to elasticsearch directly is your best bet at > this point: > > http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/docs-delete-by-query.html > > Best, > Kay > > On Thursday, January 16, 2014 10:06:40 AM UTC+1, Martin Zeug wrote: >> >> Hi I installed rc1 - works great. But how to remove old sources not uses >> anymore? >> >> Greetings, >> >> Martin >> > -- > You received this message because you are subscribed to the Google Groups > "graylog2" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. > -- Cordialement, Jean-Luc Bassereau -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
