data.destination.siem.QRadar > purge

The data.destination.siem.QRadar > purge command enables you to delete all the output files in queue waiting to be transferred to the IBM QRadar destination. When you provide the regexp parameter, all files matching the provided parameter are deleted. If you do not provide the parameter, only pending output files are deleted.

Syntax

data.destination.siem.QRadar > purge [regexp]
regxep - regular expression with posix-egrep syntax.

Example

data.destination.siem.QRadar > purge
Delete all QRadar output files? y/n [y]:
y
QRadar output files are deleted
ok