Removing remnant data after QRadar Network Threat Analytics is uninstalled
The recommended way to uninstall the IBM® QRadar Network Threat Analytics app is from the Configuration window inside the app. If you use the Extensions Management tool to uninstall the app, the uninstall process does not remove the network baseline data or the analytic scoring workflow from QRadar. QRadar continues to apply the analytics scoring algorithms to each flow even when the app is not installed.
For instructions on how to clean up remnant data after using the Extensions Management tool to remove the app, see Manually uninstalling the analytics scoring workflow in QRadar.