Delete observables rules

When a rule is no longer necessary, you can delete it.

To delete an existing entity, observable, enrichment, or discovery rule:

1. In the top navigation bar click Data configuration > Rules.

2. In the Rules view, click the Entity, Observable, Enrichment, or Discovery tab, and then click anywhere in the row corresponding to the rule you want to delete.

3. In the rule detail pane, click the menu icon , and from the drop-down menu select Delete.

4. In the confirmation dialog, click Delete.

   The rule is permanently removed.

Alternatively:

1. In the Rules view, browse to the rule you want to delete, and then click the menu icon .

2. From the drop-down menu select Delete.

3. In the confirmation dialog, click Delete.

   The rule is permanently removed.