Current ThreatQ Version Filter
 

Removing an Integration

THREATQ REQUIRED PERMISSIONS

Default ThreatQ Role: Administrative or Maintenance

Custom Role - Action Permissions: 

  • Orchestration - Edit Orchestration Workflow (required for action type integrations only)
  • Integrations - Install & Uninstall Integrations

You can remove or disable an installed integration for the integration's details page. The key difference between these two actions is that removing an integration removes the integration from your instance (and UI) while disabling an integration deactivates an integration. 

Neither action will affect the threat data that you have already ingested into your ThreatQ instance.  

Removing an Integration

Removing an integration will be remove the integration from the My Integrations UI.  You can also disable an integration to deactivate it without completely removing the integration from your instance.

From the My Integrations page:

  1. Locate and click the integration to load its details page.

    Integration Details

    To locate an integration, you can filter the list by keyword, integration category, and/or status (enabled or disabled).

  2. Click the Uninstall button located below the Enable/Disable toggle.

    The Uninstall dialog box prompts you to confirm the uninstall selection.
    Uninstall Integration

  3. Click Uninstall to confirm and remove the integration.

Disabling an Integration

Perform the following steps to disable an integration installed on your ThreatQ instance:

From the My Integrations page:

  1. Locate and click on the integration to load its details page.

    Integration Details
  2. Click the Enable/Disable toggle switch to disable the integration.