Technical Tip: Override the deletion of a user-created dashboard folder

In FortiSIEM, only the original creator of a dashboard has permission to modify or delete it. To override and manually delete a dashboard folder, follow the steps below:

1. Access the PostgreSQL database:

psql -U phoenix phoenixdb

2. Retrieve the dashboard ID by replacing dashBoardName with the actual dashboard name:

SELECT id FROM ph_group WHERE display_name = 'dashBoardName';

3. Verify the existence of associated references in ph_group_item using the ID obtained:

SELECT * FROM ph_group_item WHERE group_id = 'idFromPreviousCommand';

4. Exit the database prompt:

\q

5. Once the dashboard ID has been confirmed, run the deletion commands to remove the dashboard and its related items:

    

DELETE FROM ph_group WHERE id = 'idFromPreviousCommand';

DELETE FROM ph_group_item WHERE id = 'idFromPreviousCommand';

Lastly, confirm removal from the GUI.

Related document:

General Operations