This section describes how to remove objects related to Kaspersky CyberTrace from QRadar after Kaspersky CyberTrace is uninstalled. Note that after you have removed these objects, events from Kaspersky CyberTrace persist in QRadar.
After you have uninstalled Kaspersky CyberTrace, uninstall Kaspersky Threat Feed App (if it is installed). If you will not install Kaspersky CyberTrace in future, you can also remove log sources related to Kaspersky CyberTrace (it can be the KL_Threat_Feed_Service_v2
and KL_Verification_Tool
log sources).
To remove a log source from QRadar:
The Log Sources window opens.