ElasticSearch批量删除数据

2.x版本

一、
此版本批量删除数据需要安装插件，官方的删除插件
在每一个节点上安装插件：
sudo bin/plugin install delete-by-query
重启elasticsearch

二、
DELETE /twitter/tweet/_query?q=user:kimchy

或者
DELETE /twitter/tweet/_query
{
  "query": {
    "term": {
      "user": "kimchy"
    }
  }
}

 

{
  "query": {
    "bool": {
      "must": [
        {
          "range": {
            "pubTime": {
              "gt": "2017-01-01",
              "lt": "2017-02-01"
            }
          }
        }
      ]
    }
  }
}

{

    "took": 293290,
    "timed_out": false,
    "_indices": {
        "_all": {
            "found": 13303,
            "deleted": 13303,
            "missing": 0,
            "failed": 0
        },
        "topcom_yq": {
            "found": 13303,
            "deleted": 13303,
            "missing": 0,
            "failed": 0
        }
    },
    "failures": [ ]

}

 

使用curl删除的时候时间需要转换成时间戳
如
curl -XDELETE "192.168.0.161:9200/crawlLog/_query?pretty" -d "
{
  "query": {
    "bool": {
      "must": [
        {
          "range": {
            "date": {
              "gt": "1505347202560",
              "lt": "1505347202749"
            }
          }
        }
      ]
    }
  }
}"

 

删除 2017-07-01 之前的数据
curl -XDELETE "10.42.94.189:9200/yuqing/_query?pretty" -d "
{
  "query": {
    "bool": {
      "must": [
        {
          "range": {
            "pubTime": {
              "lt": "1498867200000"
            }
          }
        }
      ]
    }
  }
}"