Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Deleting timelines does not delete data in ES #885

Closed
garanews opened this issue May 7, 2019 · 5 comments
Closed

Deleting timelines does not delete data in ES #885

garanews opened this issue May 7, 2019 · 5 comments
Assignees
Labels

Comments

@garanews
Copy link
Contributor

garanews commented May 7, 2019

Deleting timeline from ui doesn't delete index in ES, is an expected behavior?

@garanews
Copy link
Contributor Author

garanews commented May 7, 2019

The tsctl drop_db drop ES indexes but leaves the data in Postgresql so the list of available timelines is still filled with data no more present.

@berggren
Copy link
Contributor

This is expected. A timeline can be part of many sketches, so purging from ES is not always possible. If you want to purge the timeline from both ES and SQL you can run tsctl purge

@berggren berggren self-assigned this May 28, 2019
@berggren berggren changed the title deleting timelines does not delete data in ES Deleting timelines does not delete data in ES May 28, 2019
@garanews
Copy link
Contributor Author

what do you think to have these features available from UI?

@jaegeral
Copy link
Collaborator

I agree with @garanews here, having the ability to delete it in WebGui would be really handy.

jaegeral pushed a commit to jaegeral/timesketch that referenced this issue Aug 13, 2019
Based on that issue: google#885 I made the purge command description a better.
berggren pushed a commit that referenced this issue Aug 14, 2019
Based on that issue: #885 I made the purge command description a better.
@kiddinn
Copy link
Contributor

kiddinn commented Feb 9, 2021

This will be addressed in #1602

The feature is that we can add a label to the sketch, which would indicate that it should get purged, then X days later the data will be automatically purged, this will give the user the chance to "cancel the purge" if they chance their mind, but still provide the optin of purging data from the GUI/API client.

@kiddinn kiddinn closed this as completed Feb 9, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

4 participants