Delete installed Microsoft Sentinel out-of-the-box content and solutions
If you installed a Microsoft Sentinel out-of-the-box solution, you can remove content items from the solution or delete the installed solution. If you later need to restore deleted content items, select Reinstall on the solution. Similarly, you can restore the solution by reinstalling the solution.
Important
Microsoft Sentinel is generally available within Microsoft's unified security operations platform in the Microsoft Defender portal. For preview, Microsoft Sentinel is available in the Defender portal without Microsoft Defender XDR or an E5 license. For more information, see Microsoft Sentinel in the Microsoft Defender portal.
Delete content items
Delete content items for an installed solution deployed by the content hub.
For Microsoft Sentinel in the Azure portal, under Content management, select Content hub.
For Microsoft Sentinel in the Defender portal, select Microsoft Sentinel > Content management > Content hub.Select an installed solution where the version is 2.0.0 or higher.
On the solutions details page, select Manage.
Select the content item or items you want to delete.
Select Delete.
To restore deleted content items, select Reinstall on the solution.
Delete the solution
Delete a solution and the related content templates from the content hub or in the manage solution view. Active, cloned, saved, or custom items associated with a content template aren't deleted.
In the content hub, select an installed solution.
On the solutions details page, select Delete.
Select Yes to delete the solution and the templates.
To restore an out-of-the-box solution from the content hub, select the solution and Install.
Related articles
- Centrally discover and deploy Microsoft Sentinel out-of-the-box content and solutions
- About Microsoft Sentinel content and solutions
- Microsoft Sentinel solutions catalog in the Azure Marketplace
- Microsoft Sentinel catalog