Skip to main content

Delete unused tags within SOAR search?

  • November 29, 2024
  • 4 replies
  • 16 views

Forum|alt.badge.img

Hello,

Is there a way to delete unused tags within Google Security Operations?

A little explanation: I created a test playbook that would tag new cases depending on different criteria within the alert. These tags were messy and didn't follow a good naming pattern. After fixing the playbook tagging within the action, the previous testing tags now won't go away in the SOAR Search tab, even after removing them all from cases. This is causing a lot of confusion on my team when we go to search for specific case tags. 

Any help would be appreciated. 

4 replies

hzmndt
Staff
Forum|alt.badge.img+9
  • Staff
  • December 2, 2024

Please raise a support case to get the tags to be cleaned.


dnehoda
Staff
Forum|alt.badge.img+16
  • Staff
  • December 3, 2024

I’ll check the API shortly.  I would assume you can through that. 


Forum|alt.badge.img+8
  • Staff
  • December 3, 2024

As mentioned above you will need to contact SecOps SOAR support so they can work with you to get these tags removed in the backend. 


ORBR
Forum|alt.badge.img+6
  • Bronze 5
  • December 3, 2024

It would be better if will get the option to delete tags as well, and not raise a ticket each time someone made a mistake.