The elasticsearch cluster on banco.internal.softwareheritage.org contains
- old system log data
- test data injected by error from my laptop
It would be nice to delete unneeded documents at some point.
Proposed request to clean up test data:
curl -i -H'Content-Type: application/json' -XPOST "http://localhost:9200/_all/_delete_by_query/?pretty=true" -d '
{
"query" : {
"match" : { "hostname" : "hplaptopft0" }}
}
}'Proposed request to clean up old system log data:
curl -i -H'Content-Type: application/json' -XPOST "http://localhost:9200/_all/_delete_by_query/?pretty=true" -d '
{
"query" : {
"bool": {
"must_not": [{ "match" : { "systemd_unit" : "swh-worker@" } }],
"must": { "range" : { "@timestamp" : { "lt" : "now-3M" }}}
}
}
}'Remark: closed Elasticsearch indices are not processed.
In order to delete documents from closed indices, we have to reopen them first.