Why? You can use curator to manipulate elastic search indices. For example shrink or delete old ones. Install After installing elasticsearch in debian based: Maker sure to add source to list (or you may have an old version installed instead): Add to /etc/apt/sources.list.d/: deb [arch=amd64] https://packages.elastic.co/curator/5/debian stable main Then run: Read more…
Install filebeat on RPM Based: sudo rpm –import https://packages.elastic.co/GPG-KEY-elasticsearch create /etc/yum.repos.d/elastic.repo [elastic-6.x] name=Elastic repository for 6.x packages baseurl=https://artifacts.elastic.co/packages/6.x/yum gpgcheck=1 gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch enabled=1 autorefresh=1 type=rpm-md sudo yum install filebeat on deb based: wget -qO – https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add – sudo apt-get install apt-transport-https echo “deb https://artifacts.elastic.co/packages/6.x/apt stable main” | sudo tee Read more…
delete filebeat template curl -X DELETE http://localhost:9200/_template/filebeat-6.0.0 delete all indices: curl -X DELETE ‘http://localhost:9200/_all’ delete ingest template curl -X DELETE localhost:9200/_ingest/pipeline/filebeat-* Using the developer console DELETE /_template/filebeat-6.0.0 DELETE /_all DELETE /_ingest/pipeline/filebeat-*