Archive

Posts Tagged ‘SIEM’

Delete all OSSIM incidents

April 8th, 2010 No comments

If you’re just starting out with OSSIM, chances are you have thousands of incidents due to misconfiguration.
One way to “start fresh” is to to launch ossim-db and run the following :

DELETE FROM incident;

This will delete ALL incidents and tickets.
Note: Backup first, and keep that backup for reference.