Delete installed Microsoft Sentinel out-of-the-box content and solutions (public preview)

If you've installed a Microsoft Sentinel out-of-the-box solution, you can remove content items from the solution or delete the installed solution. If you later need to restore deleted content items, select Reinstall on the solution. Similarly, you can restore the solution by re-installing the solution.

Important

Microsoft Sentinel solutions and the Microsoft Sentinel Content Hub are currently in PREVIEW, as are all individual solution packages. See the Supplemental Terms of Use for Microsoft Azure Previews for additional legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.

Delete content items

Delete content items for an installed solution deployed by the content hub.

  1. In the content hub, select an installed solution where the version is 2.0.0 or higher.

  2. On the solutions details page, select Manage.

  3. Select the content item or items you want to delete.

  4. Select Delete items.

    Screenshot of solution with content items selected for deletion.

To restore deleted content items, select Reinstall on the solution.

Delete the solution

Delete a solution and the related content templates from the content hub or in the manage solution view. Active, cloned, saved, or custom items associated with a content template aren't deleted.

  1. In the content hub, select an installed solution.

  2. On the solutions details page, select Delete.

  3. Select Yes to delete the solution and the templates.

    Screenshot of the delete confirmation prompt.

To restore an out-of-the-box solution from the content hub, select the solution and Install.

Next steps