I cannot delete a watchlist for Sentinel. It says there was an error and will not let me delete even if I move fast enough to click the delete button.. How do I resolve this?

Cybersplunker 0 Reputation points
2024-09-10T23:35:18.87+00:00

I was creating a watchlist for Sentinel and I added a file for mapping the IP addresses that will attack my VM. I was able to click on "create" but it never finished and now even though the watchlist appears in my list under Sentinel, it says there was an error.

If I click on "watchlist" I only have about 2 seconds before the error appears. If I hurry and select and click delete, an error message appears saying that I cannot delete the watchlist.

Help, please!

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,123 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Givary-MSFT 32,321 Reputation points Microsoft Employee
    2024-09-17T05:48:48.8433333+00:00

    @Cybersplunker I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to accept the answer.

    Error Message: cannot delete a watchlist for Sentinel. It says there was an error and will not let me delete even if I move fast enough to click the delete button

    Issue: creating a watchlist for Sentinel and I added a file for mapping the IP addresses that will attack my VM. I was able to click on "create" but it never finished and now even though the watchlist appears in my list under Sentinel, it says there was an error.

    If I click on "watchlist" I only have about 2 seconds before the error appears. If I hurry and select and click delete, an error message appears saying that I cannot delete the watchlist.

    Solution: Posted by @Cybersplunker It turns out that the error was due to the CSV file that I connected to this watchlist took about 10 minutes to process. After fiddling with it to no avail, it appears that all that was needed was to wait.

    If you have any other questions or are still running into more issues, please let me know. Thank you again for your time and patience throughout this issue.

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.