Resetting SIM

After you tune your deployment, avoid receiving any additional false positive information by resetting SIM to remove all offense, and source and destination IP addresses from the database and the disk.

About this task

The SIM reset process can take several minutes, depending on the amount of data in your system. If you attempt to move to other areas of the IBM® QRadar® user interface during the SIM reset process, an error message is displayed.


  1. On the navigation menu ( Navigation menu icon ), click Admin.
  2. From the Advanced menu, select Clean SIM Model.
  3. Read the information on the Reset SIM Data Model window.
  4. Select one of the following options.
    Option Description
    Soft Clean Closes all offenses in the database. If you select the Soft Clean option, you can also select the Deactivate all offenses check box.
    Hard Clean Purges all current and historical SIM data from the database, including protected offenses, source IP addresses, and destination IP addresses.
  5. If you want to continue, select the Are you sure you want to reset the data model? check box.
  6. Click Proceed.
  7. When the SIM reset process is complete, click Close.
  8. Refresh your web browser.