How Do I Delete A Reference List?

Hey Folks, 

I ran into a situation today where I wanted to delete a reference list but couldn't figure it out. 

Does anybody know how to delete a reference list from the Chronicle SIEM console or via the API? 

For context, here are the reference list documentation pages: 
https://cloud.google.com/chronicle/docs/reference/reference-lists
https://cloud.google.com/chronicle/docs/reference/reference-lists-api

Link to reference lists in the SIEM console:
<TENANT>.backstory.chronicle.security/settings/profile?refLists=

The problem being, there is no instruction set on deleting a list and I cannot find it in the console etc. 

Solved Solved
1 9 1,115
1 ACCEPTED SOLUTION

It's not possible to delete reference lists in Chronicle today, unfortunately.

View solution in original post

9 REPLIES 9

It's not possible to delete reference lists in Chronicle today, unfortunately.

Is this a feature that is being worked on? Or at least, can you provide a feature to "hide" unwanted/obsolete/errored lists? 

Has someone got a feature request in for this?

chrisd2_0-1741873318194.jpeg

๐Ÿ˜„

Data Tables is currently in Preview.  Please review this doc to let us know if it addresses your need.

Maybe I am missing something, they were talking about the capability to delete a reference list. 

You can use a data table as a multicolumn reference list and you can modify or delete them.

Maybe I am missing something, they were talking about the capability to delete a reference list.