Does delete_by_query support query string?

Question

In older Elasticsearch version I simple do the following to delete data:

curl -XDELETE 127.0.0.1:9200/what/ever/_search?q=keyword

Now in Elasticsearch 6.X it's no longer supported. I had to use delete_by_query feature.

According to the document, it seems like I can't use querystring there anymore, any ideas?

P.S

I need to match any fields, but the example query provided online matches a specific field, e.g

{
  "query": { 
    "match": {
      "message": "some message"
    }
  }
}

Val's answer is perfect, just note that the document that you have linked is using match query. check this page if you want to use query string: elastic.co/guide/en/elasticsearch/reference/current/… — Hooman Bahreini
– Hooman Bahreini, Commented Sep 7, 2018 at 3:39

Val · Accepted Answer · 2018-09-07 03:33:35Z

2

The Delete by Query API still supports a query in the query string, you just have to use POST instead of DELETE and the _delete_by_query endpoint:

curl -XPOST 127.0.0.1:9200/what/ever/_delete_by_query?q=keyword

Otherwise you can also you a query_string within the body, like this:

curl -XPOST 127.0.0.1:9200/what/ever/_delete_by_query -d '{
  "query": { 
    "query_string": {
      "query": "keyword"
    }
  }
}'

edited Sep 7, 2018 at 3:33

answered Sep 7, 2018 at 3:32

Val

218k14 gold badges377 silver badges384 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

daisy Over a year ago

Are you trying to match the message field instead of all fields?

Collectives™ on Stack Overflow

Does delete_by_query support query string?

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related