Delete Indexer node

69 views
Skip to first unread message

Riccardo Olivetto

unread,
Jul 24, 2025, 11:50:08 AM7/24/25
to Wazuh | Mailing List
Hi, in CSS environment I've followed the guide to add new indexer node
PUT _cluster/settings { "persistent": { "cluster.remote": { "ca-wazuh-indexer-1": { "seeds": ["192.168.10.101:9300"] }, "cb-wazuh-indexer-1": { "seeds": ["192.168.20.101:9300"] } } } }

How can I delete one of them?
PUT _cluster/settings { "persistent": { "cluster.remote": { "ca-wazuh-indexer-1": { "seeds": ["192.168.10.101:9300"] }, "cb-wazuh-indexer-1": { "seeds": ["192.168.20.101:9300"] } } } }PUT _cluster/settings { "persistent": { "cluster.remote": { "ca-wazuh-indexer-1": { "seeds": ["192.168.10.101:9300"] }, "cb-wazuh-indexer-1": { "seeds": ["192.168.20.101:9300"] } } } }PUT _cluster/settings { "persistent": { "cluster.remote": { "ca-wazuh-indexer-1": { "seeds": ["192.168.10.101:9300"] }, "cb-wazuh-indexer-1": { "seeds": ["192.168.20.101:9300"] } } } }
PUT _cluster/settings { "persistent": { "cluster.remote": { "ca-wazuh-indexer-1": { "seeds": ["192.168.10.101:9300"] }, "cb-wazuh-indexer-1": { "seeds": ["192.168.20.101:9300"] } } } }

Md. Nazmur Sakib

unread,
Jul 25, 2025, 5:07:07 AM7/25/25
to Wazuh | Mailing List

Hi Riccardo,

Run this to update the cluster status.


PUT _cluster/settings 

{

  "persistent": {

    "cluster.remote": {

      "ca-wazuh-indexer-1": {

        "seeds": ["192.168.10.101:9300"]

      }

    }

  }

}



Now run this command to check the updated cluster setting.

GET _cluster/settings




Let me know if this solves your issue.

Riccardo Olivetto

unread,
Jul 28, 2025, 10:44:56 AM7/28/25
to Wazuh | Mailing List
Hi, doens't work.
This is my situation:
image.png

I've done this command but the indexer continue to exist:
image.png

Md. Nazmur Sakib

unread,
Jul 29, 2025, 4:52:58 AM7/29/25
to Wazuh | Mailing List
I cannot see your screenshots


Can you attach the image to the email as an attachment?
ric.jpg

Riccardo Olivetto

unread,
Jul 29, 2025, 10:03:04 AM7/29/25
to Wazuh | Mailing List
I want to delete
 "ca-wazuh-indexer-1": {
          "skip_unavailable": "true",
          "seeds": [
            "10.0.14.68:9300"
          ]
        },
        "test-indexer": {
          "seeds": [
            "cliente.proxy:9300"
          ]
        }

Screenshot 2025-07-29 154434.png

Md. Nazmur Sakib

unread,
Jul 30, 2025, 2:21:04 AM7/30/25
to Wazuh | Mailing List

Run these commands on the Indexer management > Dev Tools


PUT _cluster/settings

{

  "persistent": {

    "cluster.remote": {

        "ca-wazuh-indexer-1": {

          "seeds": null

        

      }

    }

  }

}

And

PUT _cluster/settings

{

  "persistent": {

    "cluster.remote": {

        "test-indexer": {

          "seeds": null

        

      }

    }

  }

}



It should work.


Check this example.

These are my current cluster settings



After updating the new setting



It becomes.





Ref: https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-cluster-put-settings

Let me know if this solves your issue.

Md. Nazmur Sakib

unread,
Aug 1, 2025, 8:57:34 AM8/1/25
to Wazuh | Mailing List
Let me know if you need further help on this.
Reply all
Reply to author
Forward
0 new messages