You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
1.**Add Indicators**. Click to upload files that [add threat intelligence indicators](#add-indicators-in-the-threat-intelligence-tab).
71
+
1.**+ Add Indicators**. Click to upload files that [add threat intelligence indicators](#add-indicators-in-the-threat-intelligence-tab).
72
72
1.**Actions**. Select to perform additional actions:
73
73
***Edit Retention Period**. Enter the length of time in days to retain expired threat intelligence indicator files. The maximum number of days is 180. See [Change the retention period for expired indicators](#change-the-retention-period-for-expired-indicators).
74
74
1.**Source Name**. The source of the threat intelligence indicator file.
@@ -89,7 +89,7 @@ You can also add threat intelligence indicators using the API or a collector. Se
89
89
:::
90
90
91
91
1. In Sumo Logic, go to **Manage Data > Logs > Threat Intelligence**.
@@ -107,10 +107,7 @@ When you add indicators, the event is recorded in the Audit Event Index. See [Au
107
107
108
108
1. In Sumo Logic, go to **Manage Data > Logs > Threat Intelligence**.
109
109
1. Select a source in the list of sources. Details of the source appear in a sidebar.
110
-
1. Click **Delete Indicators**. The following dialog appears. <br/><img src={useBaseUrl('img/platform-services/threat-intelligence-delete-indicators.png')} alt="Delete threat intelligence indicators" style={{border: '1px solid gray'}} width="500" />
111
-
1. Select indicators to delete from the source:
112
-
***Delete all indicators**. Remove all indicators from the source.
113
-
***Delete indicators matching the expression**. Enter the attribute and value to match. For example, if you want to delete indicators with certain "valid until" dates from **Sumo normalized JSON** files, for an attribute enter `validUntil` and for a value enter a date. The attributes and values you enter must match attributes and values in the indicators.
110
+
1. Click **Delete Indicators**. The following message appears: **Delete all indicators for `<source-name>`**.
0 commit comments