For example the following intrusion record exists:
$ show intru
Intrusion Type Count Expiration Source
NETWORK INTRUDER 10 9-JUN-2007 15:54:30 MYSERVER::SYSTEM
Delete as follows
$ delete /intrusion MYSERVER::SYSTEM
where MYSERVER::SYSTEM is the source