Uninstalling Kaspersky Threat Feed App

This section describes how to uninstall Kaspersky Threat Feed App.

To uninstall Kaspersky Threat Feed App:

1. In QRadar, select Admin > Extensions Management.
2. In the Extensions Management form, select the INSTALLED tab.
3. Select the Kaspersky Threat Feed App item and click Uninstall.

After Kaspersky Threat Feed App is uninstalled, the Kaspersky Data Feeds tab disappears from QRadar Console. However, the custom event properties that were added during the Threat Feed Service App installation remain. You can remove them manually.

To remove custom event properties manually:

1. In QRadar, select the Admin tab and under Data sources, in the Events section, select Custom Event Properties.

   The Custom Event Properties window opens.

2. Select the custom event properties that you want to remove.

   The list of the custom event properties that were added during the installation of Kaspersky Threat Feed App is provided in the section about installing Kaspersky Threat Feed App.

3. Click Delete.

If you have created a token for Kaspersky Threat Feed App using Authorized services, you can remove it.

To remove a token for Kaspersky Threat Feed App:

1. In QRadar Console, select the Admin tab.
2. In the left navigation pane, click System Configuration.
3. In the right pane, under User Management click Authorized Services.

   The Manage Authorized Services window opens.

4. In the displayed list of services, select the service that was created for Kaspersky Threat Feed App.

   As an example, in the figure below the service is called "kaspersky app".

5. Click the Delete Authorized Service button.

   

   Removing a token for Kaspersky Threat Feed App

Page top