How to clear filebeat so it does not into kibana?

Elastic Stack Beats
1

Hi, I know I filebeat in my security onion so-status. I am using windows 10. The events get into my kibana, even when i so-elastic-clear and so-nsm-clear. How can I clear filebeat so kibana is completely empty?

thanks for any help, adive or suggestions

2

Depends what version you are on, but you can do something like DELETE filebeat* in Kibana's Console (or convert that to curl).

I am not sure how security onion does things though sorry.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.