Removing an insight

When an Insight is removed from IRC, it is not uninstalled from your system. Removing an insight provides option to retain insight-related data that can get deleted if the insights are uninstalled from your system.

To remove an Insight from IRC as follows:

  1. On the Configuration page, click Insights tab.
  2. The Actions column, click the X icon to remove the insight.
  3. In the confirmation pop-up window that is displayed, you can retain the components of the insight.
  4. To retain your rules after the insight has been removed, ensure that the Delete Rules check box is not selected. Use this feature when you uninstall an insight to install a newer version. This allows you to avoid rebuilding your rules, compensating controls and user security.
  5. To retain all the violation details after the insight has been removed, ensure that the Delete violation/exception data box is not selected. Use this feature when you uninstall an insight to install a newer version. This allows you to your mitigation details.
  6. To retain all the extracted data after the insight has been removed ensure that the Delete extracted data box is not selected.
  7. Click OK to remove the Insight