Use this command to remove a QRadar subscription.
The ID of the subscription to remove. This parameter is required if the Subscription parameter is not specified. Use the Get-CAQRadarEventSubscriptions command to find the ID. |
Remove-CAQRadarEventSubscription -Connection $connection -SubscriptionId $subscriptionId
1 |
2 |
4 |
5 |
Click Next to select the events to forward based on subsystem and event date. Once the subscription is created the starting event date and time cannot be changed. |
• |
By default, events start sending after the subscription is created. To change when to begin sending events, click Send events starting and select the desired date and time. The time cannot be more than 30 days prior to the Change Auditor installation date. |
6 |
Click Finish. |
1 |
1 |
5 |
Click Finish. |
1 |
1 |
2 |
Click Refresh. |
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Feedback Conditions d’utilisation Confidentialité Cookie Preference Center