IBM Security QRadar SOAR

 View Only
  • 1.  Undo Imports on the GUI

    Posted Tue February 04, 2020 02:58 PM
    Hi, 

    We recently installed an app from the app exchange however for various reasons have decided to uninstall it. We uninstalled it from the Integration Server however how can we remove all the fields/workflows/layouts...that it creates from within the GUI without manually removing all of them?

    Thanks, 
    Adina

    ------------------------------
    Adina Bodkins
    ------------------------------


  • 2.  RE: Undo Imports on the GUI

    Posted Wed February 05, 2020 08:34 AM
    Unfortunately there is no automated way of doing this currently. We do have various initiatives to make this automated.

    Ben

    ------------------------------
    Ben Lurie
    ------------------------------



  • 3.  RE: Undo Imports on the GUI

    Posted Wed February 05, 2020 08:48 AM
    That's a shame! Thanks for the response.

    Is there any recommended way to manually delete these different fields to ensure that I've cleaned up the app?

    Thanks!

    ------------------------------
    Adina Bodkins
    ------------------------------



  • 4.  RE: Undo Imports on the GUI

    IBM Champion
    Posted Thu February 06, 2020 12:03 PM
    Edited by Jared Fagel Thu February 06, 2020 12:03 PM
    Hey @Adina Bodkins,

    It's been a while since I've installed an app, but you should be able to at least get a list of what it's installing via the app's customize.py script. You can find this in the app's repo folder here under "/app_name_here/util" and then:


    Ideally, the script will have a commented list of everything it installs to work off of. Otherwise, you can do a Base64 decode of the ImportDefinition string, save the output as a .res file, and then begin to import it into Resilient under "Administrator" -> "Organization" -> "Import" -- you'll see the list of what it installs in the pop-up confirmation box.


    Hope that helps.

    Best,
    Jared


    ------------------------------
    Jared Fagel
    Cyber Security Analyst I
    Public Utility
    ------------------------------