When you delete a custom alert rule, the associated query continues to exist but is no longer scheduled to run at a set interval. As a result, alerts about the query will not be sent.

1. Sign in to the Arctic Wolf Unified Portal.
2. In the navigation menu, click Organization Profile > Alert Configuration Rules.
3. Click the Custom Alert Rules tab.
4. Find the custom alert rule that you want to delete.
5. Optional: To narrow the list of rules, in the Search field, enter a search term.
6. Optional: Confirm the settings of the custom alert rule that you want to delete:
   1. Click > View Custom Alert Rule.
   2. Review settings, and then click Close .
7. Click > Delete Custom Alert Rule.
8. Click Delete Custom Alert Rule.
   Tip: The custom alert rule no longer exists, but you can still view the saved query in Data Explorer. For more information, see View saved queries.