IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Deleting Custom event property

    Posted Wed May 10, 2023 11:27 AM

    Hello everyone,

    we are unable to delete the custom event properties. Has anyone faced a similar situation and resolved the issue?

    Best Regards
    Alvita



    ------------------------------
    Alvita Menezes
    ------------------------------


  • 2.  RE: Deleting Custom event property

    Posted Wed May 10, 2023 12:29 PM

    Alvita,
    besides user rights, user role and property usage dependencies, this should work using an admin account.
    Please se alternative browser, delete Qradar website cache and try again.
    If this doesnt work restart tomcat process.
    Regards
    Karl



    ------------------------------
    [Karl] [Jaeger] [Business Partner]
    [QRadar Specialist]
    [pro4bizz]
    [Karlsruhe] [Germany]
    [4972190981722]
    ------------------------------

    Original Message


  • 3.  RE: Deleting Custom event property

    Posted Wed May 10, 2023 07:16 PM

    Hi Alvita,

    a dependencies check will run when deleting or deactivating a property. If no dependencies were found at the end, the property should be able to be deleted. In some cases the delete button remains displayed as inactive even there no dependencies and using admin rights. It seems there's something „broken".. in this case my recommendation would be to create a support ticket..

    Regards,
    Ralph



    ------------------------------
    Ralph Belfiore
    SIEM Expert
    pro4bizz GmbH
    Karlsruhe
    +4972190981727
    ------------------------------

    Original Message