Uninstalling Kaspersky CyberTrace App for QRadar

This section describes how to uninstall Kaspersky CyberTrace App for QRadar.

To uninstall Kaspersky CyberTrace App for QRadar:

1. In QRadar, select Admin > Extensions Management.
2. In the Extensions Management form, select the INSTALLED tab.
3. Select the Kaspersky CyberTrace App item and click Uninstall.

After Kaspersky CyberTrace App for QRadar is uninstalled, the Kaspersky Data Feeds tab disappears from QRadar Console. However, the custom event properties that were added during the Threat CyberTrace App for QRadar installation remain. You can remove them manually.

To remove custom event properties manually:

1. In QRadar, select the Admin tab and under Data sources, in the Events section, select Custom Event Properties.

   The Custom Event Properties window opens.

2. Select the custom event properties that you want to remove.

   The list of the custom event properties that were added during the installation of Kaspersky CyberTrace App for QRadar is provided in the section about installing Kaspersky CyberTrace App for QRadar.

3. Click Delete.

If you have created a token for Kaspersky CyberTrace App for QRadar using Authorized services, you can remove it.

To remove a token for Kaspersky CyberTrace App for QRadar:

1. In QRadar Console, select the Admin tab.
2. In the left navigation pane, click System Configuration.
3. In the right pane, under User Management click Authorized Services.

   The Manage Authorized Services window opens.

4. In the displayed list of services, select the service that was created for Kaspersky CyberTrace App for QRadar.

   As an example, in the figure below the service is called "kaspersky app".

5. Click the Delete Authorized Service button.

   

   Removing a token for Kaspersky CyberTrace App for QRadar