Hey Folks,
I ran into a situation today where I wanted to delete a reference list but couldn't figure it out.
Does anybody know how to delete a reference list from the Chronicle SIEM console or via the API?
For context, here are the reference list documentation pages:
https://cloud.google.com/chronicle/docs/reference/reference-lists
https://cloud.google.com/chronicle/docs/reference/reference-lists-api
Link to reference lists in the SIEM console:
<TENANT>.backstory.chronicle.security/settings/profile?refLists=
The problem being, there is no instruction set on deleting a list and I cannot find it in the console etc.
Solved! Go to Solution.
It's not possible to delete reference lists in Chronicle today, unfortunately.
It's not possible to delete reference lists in Chronicle today, unfortunately.
Is this a feature that is being worked on? Or at least, can you provide a feature to "hide" unwanted/obsolete/errored lists?
Has someone got a feature request in for this?
๐
Data Tables is currently in Preview. Please review this doc to let us know if it addresses your need.
Maybe I am missing something, they were talking about the capability to delete a reference list.
You can use a data table as a multicolumn reference list and you can modify or delete them.
Maybe I am missing something, they were talking about the capability to delete a reference list.