If you’re just starting out with OSSIM, chances are you have thousands of incidents due to misconfiguration.
One way to “start fresh” is to to launch ossim-db and run the following :
DELETE FROM incident;
This will delete ALL incidents and tickets.
Note: Backup first, and keep that backup for reference.
Post a Comment