This article describes how to override the deletion of a user-created dashboard folder.
Scope
FortiSIEM v7.x+.
Solution
In FortiSIEM, only the original creator of a dashboard has permission to modify or delete it. To override and manually delete a dashboard folder, follow the steps below:
Access the PostgreSQL database:
psql -U phoenix phoenixdb
Retrieve the dashboard ID by replacing dashBoardName with the actual dashboard name:
SELECT id FROM ph_group WHERE display_name = 'dashBoardName';
Verify the existence of associated references in ph_group_item using the ID obtained:
SELECT * FROM ph_group_item WHERE group_id = 'idFromPreviousCommand';
Exit the database prompt:
\q
Once the dashboard ID has been confirmed, run the deletion commands to remove the dashboard and its related items:
DELETE FROM ph_group WHERE id = 'idFromPreviousCommand';
DELETE FROM ph_group_item WHERE id = 'idFromPreviousCommand';
