If you used the Extensions Management tool to uninstall the IBM QRadar Network Threat Analytics app, follow these steps to manually clean up the remnant data and workflows.
QRadar continues to apply the analytics scoring workflow to each flow even when the app is not installed. Future installations of the app do not work correctly because stale data models prevent QRadar from calculating the analytics scores correctly.
- Download and extract the attached uninstallNBA1-v1.0.1.py script.
- Transfer the script to a system that has network access to the QRadar console. The system must be capable of running python.
Alternatively, you can copy the script directly to the QRadar Console by using a utility such as scp.
- To run the script, type the following command, and use the IP address of the QRadar Console.
python uninstallNBA1-v1.0.1.py <qradar.console.ip.address>
- When prompted, enter the administrative credentials for the QRadar Console.
Was this topic helpful?
28 June 2021