The SIEM app is now a part of the Elastic Security solution. Click here to view SIEM documentation for previous releases.
« Delete list container Timeline API »
Elastic Docs ›Elastic Security Solution [7.9] ›Elastic Security APIs ›Lists API

Delete list item

edit

Delete list item

edit

Deletes list items.

Request URL

edit

DELETE <kibana host>:<port>/api/lists/items

URL query parameters

edit

The URL query must include one of the following:

  • id - DELETE /api/lists/items?id=<id>
  • list_id and value - DELETE /api/lists/items?list_id=<list_id>&value=<value>

Example request

edit

Deletes the list item with an id of internal-ip-london:

DELETE api/lists/items?id=internal-ip-london

Deletes list items from an ip container using CIDR notation:

DELETE api/lists/items?list_id=internal-ip-excludes&value=127.0.0.0/30

Response code

edit
200
Indicates a successful call.
« Delete list container Timeline API »