This section describes how to remove objects related to Kaspersky CyberTrace from RSA NetWitness after Kaspersky CyberTrace is uninstalled. Note that after you have removed these objects, events from Kaspersky CyberTrace persist in RSA NetWitness.
To remove objects related to Kaspersky CyberTrace from RSA Net Witness:
/etc/netwitness/ng/envision/etc/devices/cybertrace
directory from the computer on which Log Decoder runs.cybertrace
forwarding rule similarly to the way that it was added./decoder/config/logs.forwarding.enabled
parameter to false
.Kaspersky CyberTrace
dashboard similarly to the way that a dashboard can be created.CyberTrace Report
report similarly to the way that a report can be created.