Delete a watchlist via the REST API

Products

• Carbon Black EDR

Issue/Introduction

Occasionally a watchlist needs to be deleted but is unavailable via the Web UI. This article demonstrates a python command to do so.

Environment

• Carbon Black EDR Server: 6.0.1 and Higher

Resolution

1. Run command:

   sudo python.exe watchlist_operations.py --profile default delete -n "<Watchlist>"

2. Open WebUI console and validate the watchlist is successfully removed.

Additional Information

Example: This command will delete the watchlist: Reputation Threat >= 50

sudo python.exe watchlist_operations.py --profile default delete -n "Reputation Threat >= 50"