Kaspersky Next XDR Expert

Deleting incident workflows

You cannot delete the incident workflow if there are linked incident types that belong to the parent or child tenant. In this case, you need to assign a different workflow to the linked incident types, and then try to delete incident workflow again.

If you want to delete a workflow that is used in a playbook, before deleting, edit the playbook's trigger and/or algorithm to avoid errors.

To delete an incident workflow:

1. In the main menu, go to Settings → Tenants.
2. Click the name of the required tenant.

   The tenant's properties window opens.

3. On the Settings tab, click Incident management, and then select the Workflows tab.
4. In the list of workflows, select the workflow that you want to delete, and then click Delete.
5. In the confirmation dialog box, click Delete.

The incident workflow is deleted.