Cisco
Login
Search
Software Secure Workload
Activity Configure

Configure and Monitor Forensic Events Forensic Configuration Forensic profiles Bulk Delete Forensic Profiles

Last updated: Jun 09, 2025

Bulk Delete Forensic Profiles

Before you begin

To delete forensic profiles in bulk, identify the profiles that are unused by agent config intents.

Procedure

1

From the navigation pane, choose Defend > Forensic Rules.

  • Click the All tab to display all the rules, profiles, and intents configured under Forensics Config.


     

    By default, the check boxes for default profiles that are used by intents are disabled.

  • Click the Unused tab to view the profiles that are not used by any intents, and or unused for a certain duration of time.

  • From the dropdown list, select the time duration for profiles that are not used by any intents:

    • Anytime

    • Unused for a week

    • Unused for a month

    • Unused for 3 months

    • Unused for 6 months
2

Enable the Delete button (under the Action column) for the profiles that you wish to delete.
3

Select the check boxes for the profiles that you wish to delete.


 
By default, the Delete button is disabled.
4

Click the Delete button next to the Create Profile button. Review the list of profiles that you want to delete.
5

Click Delete to confirm.


 
At a time, you can delete only those profiles selected on a page.
Previous topic Default Profile - MITRE ATT&CK Profile Next topic Forensic visualization