Whether you mistakenly defined the rule and it opened up a lot of cases, or a large number of cases were accumulated over time, deleting them was simply impossible. The solution that appeared in the forums was to delete the cases as a resource directly from the database, but this form of deletion deletes the resource itself without removing the links to other resources. We, CyberSIEM, developed a tool that will delete the cases with the ArcSight API the right way, without hurting the job. How to use:
Anyway, DO NOT delete directly from the database.
Suggested for you are based on app category, product compatibility, popularity, rating and newness. Some apps may not show based on entitlements. Learn more about entitlements.
ESNC - Enterprise Security and Compliance
How to use:
Related content and resources
Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox