About sayala

sayala

Just to be clear, this is specifically for Splunk SOAR. I would like to delete unused tags on SOAR containers. I do understand that i can go to Administration -> Administration Settings -> Tags and manually delete them, but we have thousands and without manually checking each one, I am not sure what its in use. I would like to be able to delete everything that is no longer in use on containers.

sayala

We use dynamic tags, like ticket numbers or alert IDs on all of our containers. We have a retention policy that deletes containers after a year of them not being updated. I would like something that removes all the unused tags, similar to that retention policy. So, if a tag with an event ID is no longer being used, it will delete the tag. We currently have thousands of tags and it starts to bug the UI.

sayala · ‎06-10-2024

Can I configure a Darktrace asset that routes through the automation broker? When Attepmting to configure, the broker is greyed out and will not let me select it. (Yes, the broker is on and active.)

Posts	3
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎03-20-2024

Online Status	Offline
Date Last Visited	2 weeks ago

Delete Unused tags

Darktrace with Automation Broker

Re: Delete Unused tags

Delete Unused tags

Darktrace with Automation Broker