Why, after deleting the index in logstash, does Kibana still display it?

Question

I have 2 movie_indexer and trial_indexer .

I used the following command to remove movie_indexer:

 curl -XDELETE "http://localhost:9200/movie_indexer/" 

Then I go over Kibana. It still showed the index and its values.

When i used

 curl -XDELETE "http://localhost:9200/.kibana" 

after this trial_indexer absent.

Note. After using the last command, I can create an index template for trial_indexer , but not for movie_indexer.

I want to delete a specific index without having to recreate the index template for the restored indexes. How can i do this? (I use windows)

Answer 1

This is normal because Kibana will save the index template and its associated field settings from the display inside its own index named .kibana .

If you want to remove the movie_indexer index (containing the data) and the associated index template in Kibana (containing the Kibana settings for this index), you can do this by issuing two queries, namely the one that you already did to delete the data

 curl -XDELETE "http://localhost:9200/movie_indexer/" 

and another one to delete the index template in Kibana, where pattern_name is the name that you pointed to the index template you want to delete (by default it is the same name as your index, i.e. movie_indexer )

 curl -XDELETE "http://localhost:9200/.kibana/index-pattern/pattern_name" 

Please note that you can also delete the index template directly in Kibana by choosing Settings> Indexes, then select the desired index template and click the "delete index template" button