Delete intelligence records

task australia Updated Sep 10, 2026 1 min read remove-intelligence-records.md
Raw file servicenow.com

Delete records from Threat Intelligence library.

Before you begin

Role required: sn_sec_tisc.admin

Procedure

  1. Navigate to Workspaces > Threat Intelligence Security Center.

  2. Click Threat Intel Library icon on the workspace.

  3. Open any record.

  4. Go to Source Records section.

  5. Select Delete to delete the source records.

  6. Delete the library record.

    Note:

    1. If a library record with associated source records is deleted, then the source records will be reprocessed, and a new library record will be created by aggregating the field values from the source records.
    2. To permanently delete the data from the threat intelligence library, use archival rules instead of deleting the library records. For more information, see, TISC Data archival and cleanup.
Keywords delete intelligence recordsthreat intel librarysource recordslibrary recorddata archival
Search documentation
Search document titles and file paths on the australia branch