Delete an ESA Rule

You can delete one or more ESA rules. Once the ESA rule is deleted, the ESA rule will be removed from the available list.

To delete an ESA Rule

  1. Go to netwitness_configure.png (CONFIGURE) > Policies.

  2. In the policies panel, click Content.

  3. In the left panel, click Content Library.

    The available rules are displayed.

  4. Click Event Stream Analysis Rule.

    The available ESA rules are displayed.

    Note: Only Custom ESA rules that are not assigned to a policy will be available for deletion.

  5. Select one or more custom ESA rules and click Delete.

    A confirmation pop-up is displayed.

  6. Click Delete.