ElasticSearch Delete By Query - delete multiple values

Question

Using the following ElasticSearch query to delete all documents with sourceId 1:

POST http://{{elasticip}}:9200/index2/index2_doc/_delete_by_query

{
  "query": {
    "match": {
      "sourceId": 1
    }
  }
}

What is the proper syntax of the body if I wanted to delete from sourceId 1, 2, and 3 all at once?

You can use terms query with multiple Ids or multiple match query in should clause — jaspreet chahal
– jaspreet chahal, Commented Oct 28, 2019 at 14:13
{ "query" : { "bool" : { "filter" : { "terms" : { "sourceId" : [1,2,3] } } } } } — LeBigCat
– LeBigCat, Commented Oct 28, 2019 at 14:15
Hi @LeBigCat . Thanks! That syntax works. Are you sure you don't want to post that as the answer so I can mark it as the answer? — Stpete111
– Stpete111, Commented Oct 28, 2019 at 14:18

LeBigCat · Accepted Answer · 2019-10-28 14:29:51Z

2

Use bool terms filter:

{ "query" : { "bool" : { "filter" : { "terms" : { "sourceId" : [1,2,3] } } } } }

note: jaspreet advices are also corrects.

answered Oct 28, 2019 at 14:29

LeBigCat

1,7801 gold badge14 silver badges17 bronze badges

Sign up to request clarification or add additional context in comments.

1 Answer 1