I enabled SA-Eventgen for my ES App and now I have many faux security events. This seems to be a demo to fill the dashboard with events. I have since disabled the SA. I can't seem to drill down into them to find them in my indexes. I am looking for a way to identify and remove this data completely.
↧