April 8, 2010 · IDS OSSIM Security SIEM

Delete all OSSIM incidents

If you’re just starting out with OSSIM, chances are you have thousands of incidents due to misconfiguration.
One way to “start fresh” is to to launch ossim-db and run the following :

DELETE FROM incident;

This will delete ALL incidents and tickets.
Note: **Backup first, and keep that backup for reference. **