Delete all data from wazuh indexer

[Alex V.]

I just need to clear all collected data from index. Which documents I need to delete and how to perform it?

[Olusegun Adenrele Oyebo]

Dear Alex,

Thank you for using Wazuh.

For you to be able to delete Wazuh indices, first of all you can run the below command to check the list of indexes you have:

• curl -k -u admin:admin -XGET "https://192.168.227.139:9200/_cat/indices?v"

            Replace <admin_password> with the password of the user admin and also <ip_address> with the IP address of the wazuh indexer.

You can then use the below command to delete the old indexes:

• curl -k -u admin:<admin_password> -XDELETE "https://<ip_address>:9200/<index_to_delete>".

           Replace <admin_password> with the password of the user admin and also <ip_address> with the IP address of the wazuh indexer and <index_to_delete> with the index to delete e.g. curl -k -u admin:Test123 -XDELETE "https://192.168.227.139:9200/wazuh-alerts-4.x-2023.08.20"

I hope this was helpful. Do not hesitate to get back to us if you need any other thing,

Best regards.

[Alex V.]

Thanks!

пятница, 15 сентября 2023 г. в 15:49:17 UTC+3, Olusegun Adenrele Oyebo:

[Olusegun Adenrele Oyebo]

Hello Alex,

You're welcome. Do not hesitate to reach out to us again in case you need any other thing.

Best regards.