Menu
I need to remove a field in all the documents indexed to Elasticsearch. How can I do it?
956
You cannot delete the status field from this mapping. If you really need to get rid of this field, you'll have to create another mapping without status field and reindex your data.
You have to delete and re-index the indices still containing the field with the updated mapping. Then you can go to the index pattern management page in Kibana and refresh the index pattern there using the reload button in the top right. This should remove the fields from the index pattern as well.
To delete the index, you must roll over the data stream so a new write index is created. You can then use the delete index API to delete the previous write index.
What @backtrack told is true , but then there is a very convenient way of doing this in Elasticsearch. Elasticsearch will abstract out the internal complexity of the deletion. You need to use update API to achieve this -
curl -XPOST 'localhost:9200/test/type1/1/_update' -d '{ "script" : "ctx._source.remove(\"name_of_field\")" }' You can find more documentation here.
Note: As of Elastic Search 6 you are required to include a content-type header:
-H 'Content-Type: application/json' If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
