[graylog2] Re: Delete by Query (XDELETE) not works

2016-03-28 Thread Steve Miller
No idea what can be wrong? Is it purhaps the version of ElasticSearch? Greeting Am Donnerstag, 24. März 2016 07:21:12 UTC+1 schrieb Steve Miller: > > Hello > > The *ElasticSearch Version is 1.7.1 *andthis is the current script > > #!/bin/sh > FDATE=`date +"%F %H:%M:%

[graylog2] Re: Delete by Query (XDELETE) not works

2016-03-24 Thread Steve Miller
"failed":0}},"graylog2_2":{"_shards":{"total":4,"successful":4,"failed":0}},"graylog2_4":{"_shards":{"total":4,"successful":4,"failed":0[blcrood@blx-lm00 scripts]$ I hope this help.

[graylog2] Delete by Query (XDELETE) not works

2016-03-23 Thread Steve Miller
Hello I have this Bash-Script to delete messages for the ElasticSearch Server. #!/bin/sh FDATE=`date +"%F %H:%M:%S.000" --date="60 days ago"` TDATE=`date +"%F %H:%M:%S.000" --date="0 days ago"` RANGE='{ "query": { "filtered": { "query": { "query_string": { "query":

[graylog2] Re: Delete messages with syslog level 7

2016-03-22 Thread Steve Miller
tal > modifications. > > You can remove the write block by setting index.blocks.write to false, > see > https://www.elastic.co/guide/en/elasticsearch/reference/1.7/indices-update-settings.html > > for details. > > > Cheers, > Jochen > > On Monday, 21 March

[graylog2] Re: Delete messages with syslog level 7

2016-03-21 Thread Steve Miller
x- delete" with the error. cheers Steve Am Montag, 14. März 2016 10:00:42 UTC+1 schrieb Steve Miller: > > Hello > > Is it possible to delete all message from Graylog/Elasticsearch with > syslog level 7? Purhaps with a cron job. > We have many debug messages in our Graylog, an

[graylog2] Re: Delete messages with syslog level 7

2016-03-16 Thread Steve Miller
t;: { "message" : "level==7"}}}' I want see all records with the Log-Level 7. Not works. If it works, then i want delete all message there older as 1 week ("created at") AND level=7 and then i want run every day a cron. Thank you very much cheers Steve Am Mon

[graylog2] Re: Delete messages with syslog level 7

2016-03-15 Thread Steve Miller
It works, server restart and it's going. Thank you very much Am Montag, 14. März 2016 10:00:42 UTC+1 schrieb Steve Miller: > > Hello > > Is it possible to delete all message from Graylog/Elasticsearch with > syslog level 7? Purhaps with a cron job. > We have many debug messa

[graylog2] Re: Delete messages with syslog level 7

2016-03-15 Thread Steve Miller
Hello What for permission/users need the graylog.drl? Is this purhaps the problem because my code not works? Cheers Steve Am Montag, 14. März 2016 10:00:42 UTC+1 schrieb Steve Miller: > > Hello > > Is it possible to delete all message from Graylog/Elasticsearch with > syslog l

[graylog2] Re: Delete messages with syslog level 7

2016-03-14 Thread Steve Miller
ring value. Also be aware that nothing written on stdout (using > System.out.println) will be visible. > > > Cheers, > Jochen > > On Monday, 14 March 2016 16:33:20 UTC+1, Steve Miller wrote: >> >> Thank you very much, i try with the graylog.drl but it's not works. &

[graylog2] Re: Delete messages with syslog level 7

2016-03-14 Thread Steve Miller
e aware that nothing written on stdout (using > System.out.println) will be visible. > > > Cheers, > Jochen > > On Monday, 14 March 2016 16:33:20 UTC+1, Steve Miller wrote: >> >> Thank you very much, i try with the graylog.drl but it's not works. >> >> impo

[graylog2] Re: Delete messages with syslog level 7

2016-03-14 Thread Steve Miller
"); // Don't do this in production. m.setFilterOut(true); end Is my code wrong or msust restating the Graylog when i change the graylog.drl? regards Steve Am Montag, 14. März 2016 10:00:42 UTC+1 schrieb Steve Miller: > > Hello > > Is it possible to delete all message from G

[graylog2] Delete messages with syslog level 7

2016-03-14 Thread Steve Miller
Hello Is it possible to delete all message from Graylog/Elasticsearch with syslog level 7? Purhaps with a cron job. We have many debug messages in our Graylog, and so i'm looking for a way how can remove all this debug messages. regards Steve -- You received this message because you are