Deleting users or entities from UEBA

You can remove one or up to 100 users or entities. from the QRadar® User Entity Behavior Analytics (UEBA) app at once.

1. You can see the Search result page after searching for users or entities. of your search criteria, such as searching for monitored users or entities.
2. Select the checkbox next to the users or entities. that you want to delete, and click the Delete icon ().
3. In the Confirm multiple users or entities. deletion window, click Yes to remove the selected user or entity from UEBA.
   The deleted users are added to the reference set UBA : Users Not Tracked reference set. The deleted entities are added to the reference set UEBA : Entities Not Tracked.

   For more information about the UBA : Users Not Tracked reference set, see Reference sets.