Troubleshooting
Problem
The "Remove" and "Copy" buttons are disabled and the user is not able to delete the Log Source group.
Symptom
Cause
The Remove and Copy buttons are disabled by design.
Diagnosing The Problem
Resolving The Problem
You cannot delete items in the tree. They have to be deleted out of the list grid by using the procedure.
- Log in to the QRadar® UI as an admin user.
- Click the Admin tab.
- Click Log Source Groups.
- Click "New Group" enter a name.
- Click "All Log Source Groups" on the tree on the left.
- Click your new group in the list on the right.
- Verify that the Remove button is enabled.
Results
After this, the Log source group can be deleted.
Note: The Copy button is never enabled for groups. It is for copying an item from one group to another.
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwsyAAA","label":"Admin Tasks"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Was this topic helpful?
Document Information
Modified date:
15 July 2021
UID
ibm16468555