Uninstall Application

Perform the following steps to uninstall the application:

1. Uninstall the app from Admin > Extensions Management.
2. Delete custom events for this app (in case of Qualys App version 1.0.1 or lower):
   1. Go to Admin > Custom Event Properties.
   2. Search and delete all entries associated with Qualys LEEF log source type. (How to do? Just search Qualys and delete all the entries that are displayed in search results).
3. Delete Log Source extension:
   1. Go to Admin > Log Source Extensions.
   2. Delete entries with the extension QualysLEEFCustom_ext.
4. Delete Log Source:
   1. Go to Admin > Log Sources.
   2. Delete the log source named Qualys or QualysMultiline.
5. Delete custom event mapping from Qualys LEEF:
   1. Go to Admin > DSM Editor.
   2. Search and open Qualys LEEF and go to Event Mappings tab.
   3. Delete the entry with Event ID / Category Qualys or QualysMultiline.
   4. Click Save and close the tab.

While uninstalling the app in unfortunate cases, it should be done cleanly. Any leftover artifacts can potentially interfere with next installation attempt creating unstable state.

When the app gets installed, the following components are installed in QRadar, so to uninstall completely, the following components also need to be removed.