How to Remove an Observable

This topic provides step-by-step instructions for removing an observable from a case or alert in TheHive.

Required permissions

Only users with the manageObservable permission can manage observables in TheHive.

Procedure

1. Locate the observable you want to remove.

2. In the observable, select .

   

3. Select Delete.

4. Select OK.

Next steps

• Add an Observable
• Update the Status of an Observable
• Edit Multiple Observables
• Pin an Observable
• Export Data from Observables
• Run Analyzers and Review Reports for an Observable
• Run Responders and Review Reports for an Observable
• Import Observables from Analyzer Reports
• Exclude an Observable from Similarity Checks