Deleting a log source

Use the QRadar® Log Source Management app to delete log sources that you no longer need. Event data is retained on disk after a log source is deleted.

Procedure

  1. In the QRadar Log Source Management app, select one or more log sources.
  2. Click Delete.
  3. Optional: You can also delete your log source in the Log Source Summary pane.