Last active
November 16, 2020 19:05
-
-
Save dcode/f2e2db49af17e4240b1fdb676cb72b16 to your computer and use it in GitHub Desktop.
Delete all Kibana saved objects. This is useful if you're developing beats modules or just want to clear out some cruft. Works with 7.x API.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/bin/bash | |
# From the docs: https://www.elastic.co/guide/en/kibana/current/saved-objects-api-get.html#saved-objects-api-get-params | |
# Types can be: visualization, dashboard, search, index-pattern, config, timelion-sheet | |
# You can also have a map type, which isn't in the docs linked above | |
export KIBANA_API_URL='http://elastic:[email protected]:5601' | |
export OBJECTS=$(curl "${KIBANA_API_URL}/api/saved_objects/_find?fields=id&type=index-pattern&type=visualization&type=dashboard&type=search&type=index-pattern&type=timelion-sheet&type=map&per_page=1000" | jq -rc '.saved_objects[] | {"type": .type, "id": .id } | @base64') | |
# Loops through the base64-encoded JSON objects | |
for item in ${OBJECTS}; | |
do | |
TYPE=$(echo "${item}" | base64 -d | jq -r '.type') | |
ID=$(echo "${item}" | base64 -d | jq -r '.id') | |
echo "Deleting ${TYPE} with ID ${ID}" | |
curl -s -H 'kbn-xsrf: true' -XDELETE "${KIBANA_API_URL}/api/saved_objects/${TYPE}/${ID}" | |
done |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment