The SIEM app is now a part of the Elastic Security solution. Click here to view SIEM documentation for previous releases.
« Update rule Bulk rule actions »
Elastic Docs ›Elastic Security Solution [7.9] ›Elastic Security APIs ›Detections API

Delete rule

edit

Delete rule

edit

Deletes a single rule using the rule_id or id field.

Request URL

edit

DELETE <kibana host>:<port>/api/detection_engine/rules

URL query parameters

edit

The URL query must include one of the following:

  • id - DELETE /api/detection_engine/rules?id=<id>
  • rule_id- DELETE /api/detection_engine/rules?rule_id=<rule_id>

Example request

edit

Deletes the rule with an id value of 16947168-5405-453d-a8b5-aadad357af42:

DELETE api/detection_engine/rules?id=16947168-5405-453d-a8b5-aadad357af42

Response code

edit
200
Indicates a successful call.
« Update rule Bulk rule actions »