Security Compliance

Un-schedule or Delete saved queries in SEM

This article provides steps on how to un-schedule or delete previously saved queries in SEM

First published date

9/4/2023 12:31 PM

Last published date

9/4/2023 12:31 PM

Overview

Previously created and scheduled historical search queries continue to run in the background and are not event visible to admin users SEM via the GUI. This article provides steps on how to un-schedule or delete previously saved queries in SolarWinds Security Events Manager (SEM)
 

Product section

Security Event Manager

Cause

NA

Resolution

To fix this issue, first upgrade your SEM to 2023.2 or above and proceed with below steps. 

Instructions for Upgrade: 

Steps to Un-schedule or delete queries: 
  • Click "Historical Event"
  • On the left, click Queries. 
  • Expand "User-created" queries (or select the one you are looking for)
  • Click the 3 dots > Select "Manage queries" or "un-schedule"
  • Select the query > Click "More" >  "Delete".