Kibana - Elasticsearch 基本操作汇总

1. 依据时间删除数据

需要注意的是ES每次删除的条数限制，数据量大无法一次删除

|*|*************|*|
# Kibana
POST es_kubernetes_vms_logs/_search
{
  "query": {
    "range": {
      "@timestamp": {   
        "lt": "now-30d",
        "format": "epoch_millis"
      }
    }
  }
}
POST es_kubernetes_vms_logs/_delete_by_query
{
  "query": {
    "range": {
      "@timestamp": {   
        "lt": "now-30d",
        "format": "epoch_millis"
      }
    }
  }
}
|*|*************|*|
# ES
$ curl -XDELETE 'http://localhost:9200/twitter/tweet/_query' -d '{
  "query": {
    "range": {
      "@timestamp": {   
        "lt": "now-30d",
        "format": "epoch_millis"
      }
    }
  }
}
'
|*|*************|*|