IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  Deleting Custom event property

    Posted 05/10/23 11:27 AM

    Hello everyone,

    we are unable to delete the custom event properties. Has anyone faced a similar situation and resolved the issue?

    Best Regards
    Alvita



    ------------------------------
    Alvita Menezes
    ------------------------------


  • 2.  RE: Deleting Custom event property

    Posted 05/10/23 12:29 PM

    Alvita,
    besides user rights, user role and property usage dependencies, this should work using an admin account.
    Please se alternative browser, delete Qradar website cache and try again.
    If this doesnt work restart tomcat process.
    Regards
    Karl



    ------------------------------
    [Karl] [Jaeger] [Business Partner]
    [QRadar Specialist]
    [pro4bizz]
    [Karlsruhe] [Germany]
    [4972190981722]
    ------------------------------



  • 3.  RE: Deleting Custom event property

    Posted 05/10/23 07:16 PM

    Hi Alvita,

    a dependencies check will run when deleting or deactivating a property. If no dependencies were found at the end, the property should be able to be deleted. In some cases the delete button remains displayed as inactive even there no dependencies and using admin rights. It seems there's something „broken".. in this case my recommendation would be to create a support ticket..

    Regards,
    Ralph



    ------------------------------
    Ralph Belfiore
    SIEM Expert
    pro4bizz GmbH
    Karlsruhe
    +4972190981727
    ------------------------------



Related Content