Removing remnant data after QRadar Network Threat Analytics is uninstalled

Correct analytics scoring in QRadar® Network Threat Analytics depends on having an up-to-date network baseline. Remnant baseline data from previous installations will affect analysis scoring in future installations of the app.

The recommended way to uninstall the IBM® QRadar Network Threat Analytics app is from the Configuration window inside the app. If you use the Extensions Management tool to uninstall the app, the uninstall process does not remove the network baseline data or the analytic scoring workflow from QRadar. QRadar continues to apply the analytics scoring algorithms to each flow even when the app is not installed.

For instructions on how to clean up remnant data after using the Extensions Management tool to remove the app, see Manually uninstalling the analytics scoring workflow in QRadar.