Return Elasticsearch slowlogs settings to default

Question

I want to be able to set the slowlogs time to 0 for a period, then reset the setting back to the default. I use

curl -X PUT -H "Content-Type: application/json" -d '{"index.search.slowlog.threshold.query.warn": "0s"}' ":9200/index/_settings"

to activate slowlogs. which adds

"search": {
   "slowlog": {
      "threshold": {
         "query": {
           "warn": "0s"
         }
      }
   }
}

to the settings. I can do

curl -X PUT -H "Content-Type: application/json" -d '{"index.search.slowlog.threshold.query.warn": "-1"}' ":9200/index/_settings"

to deactivate slowlogs, but that leaves the new settings block in place where I want the settings to return to what they were before my meddling.

Is there a way to return the settings to default? (Ideally removing the whole new block so the settings are exactly as they were before.)

user_3280224 · Answer

You can reset to default by passing null as the value of a setting.

curl -X PUT -H "Content-Type: application/json" \
  -d '{"index.search.slowlog.threshold.query.warn": null}' \
  ":9200/index/_settings"

user_4039431 · Answer