IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  How do you completely delete an app?

    Posted 04/01/21 04:14 PM

    I am working on app that I deployed to QRadar with the SDK version 2.0.2. I realized I gave it the wrong name, so I updated the manifest.json file and used the API to delete the app from QRadar. However, it gives me an error now when I try to deploy the app that it conflicts with the version I already deleted. Is there a way to completely delete the old version so that I can get past this error?

    qapp deploy -q qradar -u admin -p ../com.myapp.zip

    Please enter password for user admin:

    Application fresh install detected

    Uploading ../com.myapp.zip 386611 bytes

    UUID [3b37d6de-38e4-4e18-a832-f47e91121b8b] is already allocated to existing application definition 1051



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: How do you completely delete an app?

    Posted 04/19/21 05:00 AM

    Try the below method (bit cautious as we are directly touching the DB here)

    (not sure if you have already tried to look for 'list of installed app' from Qradar Assistant App, there also it shows all the running apps, and we can take certain action as well)

    >> psql -U qradar

    >> select id,name from installed_application;

    if you see your app there in the list, then delete it

    >> delete from installed_application where id=xxxx;

    >> select id,name from installed_application_instance;

    if you see your app there in the list, then delete it

    >> delete from installed_application_instance where id=xxxx;

    >>\q (to quit)

    To a tomcat restart and try again to install the app again.



    #QRadar
    #Support
    #SupportMigration