How to delete resource by ID?
So I have a rule that seems to be lingering. It showed up on a resource validation report and shows a URI in a users folder but in the console it doesn't show up there. If I search for the rule by the ID it finds it and I can edit it from there but I don't see any option to delete it since it is not showing up in the folder path where it is supposed to be. Is there an alternative way to delete it?
You can access the mysql database and delete the resource from there. Do at your own risk.
1. SSH to Express / ESM as root
2. Login to database as arcsight user:
Login arcsight user
./mysql -u arcsight -p
Enter password: <your mysql password> (Note: default is 'arcsight' without the single quote)
mysql> use arcsight;
3. Execute this sql statement
mysql> select name from arc_resource where id='<ID of the resource>';
4. Confirm if that is the resource you want to delete and execute:
mysql> delete from arc_resource where id='<ID of the resource>';