How can we remove an index from an alias? That is, I no longer need to associate an index to an alias.
My second question is - can an alias exist without any indexes?
To remove all aliases, use * or _all . (Required, string) Comma-separated list of data streams or indices used to limit the request. Supports wildcards ( * ).
To delete the index, you must roll over the data stream so a new write index is created. You can then use the delete index API to delete the previous write index.
you can freely delete your indexes (from the indexes panel) in either graylog or elasticsearch, just recalculate your indexes after. you may want to update your retention policy to fit your storage availability. I would rotate them based on space, and then only keep the number of indexes you have room for.
An alias is a secondary name for a group of data streams or indices. Most Elasticsearch APIs accept an alias in place of a data stream or index name. You can change the data streams or indices of an alias at any time.
In case you don't know the name of index and you want to remove alias from all indexes
Post: /_aliases
{
"actions" : [
{ "remove" : { "index" : "*", "alias" : "nameOfAlias" } }
]
}
DELETE /yourindex/_alias/unwantedalias
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With