You can delete network anomaly detection rules. However, you cannot delete rules with a last run status of New, Pending, Awaiting data, or Running.
To delete the status of a Network Anomaly Detection rule:
A window with a confirmation prompt opens.
Among the selected rules, you can delete only those rules for which the status of the last run differs from New, Pending, Awaiting data, and Running. If the selected rules contain any with a status of New, Pending, Awaiting data, or Running, a message about this will appear on the screen. To delete such rules, first stop the rules.