EDR: How to remove a feed manually
search cancel

EDR: How to remove a feed manually

book

Article ID: 287372

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

  • Removing an Alliance or Custom Feed Manually.

Environment

  • EDR Server: All Supported Versions

Resolution

  • Remove the feed using the CURL command below: 
    • curl -k "https://localhost:443/api/v1/feed/<feed_id>" -H "X-Auth-Token: <api_token>" -X "DELETE"

Additional Information

  • This may be done due to feed/IOC corruption or not being able to remove the feed via the Web UI.
Powered by Wolken Software