Notes.md

Helpful Notes

How to remove data

1. List sources: | metadata type=hosts index=* OR index=_* StackOverflow
2. Delete: source=path\to\sourcename | delete GoSplunk

Nginx Logs

• Types of logs: access, error, fail2ban, ...
• Checking for suspicious IP's and malicious logins

Suggested Searches