Uninstalling the UEBA app

Use the IBM® QRadar® Extension Management tool to uninstall your application from your QRadar Console.

Before you begin

If you have Machine Learning Analytics (ML app) installed, you must uninstall the ML app from the Machine Learning Settings page before uninstalling the UEBA app from the Extension Management window.

If you do not remove the ML app before you uninstall UEBA, you must remove it using the interactive API documentation interface.

Procedure

  1. On the QRadar Console, click Admin > Extensions Management.
  2. On the INSTALLED tab of the Extension Management window, select User Entity Behavior Analytics app and click Uninstall.

    When you uninstall an app, it is removed from the system.

  3. The following content packages are installed when you configure the UEBA app. You must uninstall each content package to completely remove the app.
    • User Entity Behavior Analytics Access and Authentication Content
    • User Entity Behavior Analytics Accounts and Privileges Content
    • User Entity Behavior Analytics Browsing Behavior Content
    • User Entity Behavior Analytics Cloud Content
    • User Entity Behavior Analytics DNS Analyzer Content
    • User Entity Behavior Analytics Domain Controller Content
    • User Entity Behavior Analytics Endpoint Content
    • User Entity Behavior Analytics Exfiltration Content
    • User Entity Behavior Analytics Geography Content
    • User Entity Behavior Analytics Network Traffic and Attacks Content
    • User Entity Behavior Analytics Threat Intelligence Content