Delete rule

edit

Deletes a single rule using the rule_id or id field.

Console supports only Elasticsearch APIs. Console doesn’t allow interactions with Kibana APIs. You must use curl or another HTTP tool instead. For more information, refer to Run Elasticsearch API requests.

Request URL

edit

DELETE <kibana host>:<port>/api/detection_engine/rules

URL query parameters

edit

The URL query must include one of the following:

  • id - DELETE /api/detection_engine/rules?id=<id>
  • rule_id- DELETE /api/detection_engine/rules?rule_id=<rule_id>

Example request

edit

Deletes the rule with an id value of 16947168-5405-453d-a8b5-aadad357af42:

DELETE api/detection_engine/rules?id=16947168-5405-453d-a8b5-aadad357af42

Response code

edit
200
Indicates a successful call.