IBM Security QRadar SOAR

 View Only
  • 1.  Incidents : Bulk Delete

    Posted Thu December 05, 2019 07:10 AM
    Hi,

    I want to delete test data. What is the proper way to delete them? 

    Best

    ------------------------------
    Jasmine
    ------------------------------


  • 2.  RE: Incidents : Bulk Delete

    Posted Thu December 05, 2019 07:51 AM
    I want to delete approx 3000 test data

    ------------------------------
    Jasmine
    ------------------------------



  • 3.  RE: Incidents : Bulk Delete

    Posted Fri December 06, 2019 07:17 AM
    Can you use the list incidents page, filter for the proper incidents, select them and select Delete Incidents?



    ------------------------------
    Ben Lurie
    ------------------------------



  • 4.  RE: Incidents : Bulk Delete

    Posted Thu December 12, 2019 08:52 AM
    Hi,

    I guess he is expecting for a method to delete the whole 3000.
    I am facing the same problem (the UI limitation is 500 incidents and it takes a long time.
    additionally Deleting from API taks alot of time).

    Thanks.

    ------------------------------
    Guy Liberman
    ------------------------------



  • 5.  RE: Incidents : Bulk Delete

    Posted Fri December 13, 2019 02:35 AM
    Yes I can, but not with 3000+ incidents :)

    ------------------------------
    Jasmine
    ------------------------------



  • 6.  RE: Incidents : Bulk Delete

    Posted Mon January 06, 2020 07:25 AM
    Edited by Burak Karaca Tue January 07, 2020 03:20 AM
    Hi,

    Best way to do that is using API as GUI itself using API calls for this requests. It will take nearly same time to do this from GUI or using API and there is a way to exceed 500 limit on GUI (with editing html value of limit count dropdown) but you cant exceed 1000 limit any either way, so API will be better.

    ------------------------------
    Burak Karaca
    ------------------------------