Skip to content

Instantly share code, notes, and snippets.

@dcode
Last active November 16, 2020 19:05
Show Gist options
  • Save dcode/f2e2db49af17e4240b1fdb676cb72b16 to your computer and use it in GitHub Desktop.
Save dcode/f2e2db49af17e4240b1fdb676cb72b16 to your computer and use it in GitHub Desktop.
Delete all Kibana saved objects. This is useful if you're developing beats modules or just want to clear out some cruft. Works with 7.x API.
#!/bin/bash
# From the docs: https://www.elastic.co/guide/en/kibana/current/saved-objects-api-get.html#saved-objects-api-get-params
# Types can be: visualization, dashboard, search, index-pattern, config, timelion-sheet
# You can also have a map type, which isn't in the docs linked above
export KIBANA_API_URL='http://elastic:[email protected]:5601'
export OBJECTS=$(curl "${KIBANA_API_URL}/api/saved_objects/_find?fields=id&type=index-pattern&type=visualization&type=dashboard&type=search&type=index-pattern&type=timelion-sheet&type=map&per_page=1000" | jq -rc '.saved_objects[] | {"type": .type, "id": .id } | @base64')
# Loops through the base64-encoded JSON objects
for item in ${OBJECTS};
do
TYPE=$(echo "${item}" | base64 -d | jq -r '.type')
ID=$(echo "${item}" | base64 -d | jq -r '.id')
echo "Deleting ${TYPE} with ID ${ID}"
curl -s -H 'kbn-xsrf: true' -XDELETE "${KIBANA_API_URL}/api/saved_objects/${TYPE}/${ID}"
done
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment