The SIEM app is now a part of the Elastic Security solution. Click here to view the current documentation.
IMPORTANT: No additional bug fixes or documentation updates will be released for this version.
« Delete all comments Set default SIEM UI connector »
Elastic Docs ›SIEM Guide [7.8] ›SIEM APIs ›Cases API

Delete case

edit

Delete case

edit

Deletes the specified cases and all associated comments.

Request URL

edit

DELETE <kibana host>:<port>/api/cases?ids=["<case ID1>","<case ID2>"]

URL parts

edit

The URL must include the case IDs of the cases you are deleting. Call Find cases to retrieve case IDs.

All non-ascii characters must be encoded.

Example request

edit

Deletes cases with these IDs:

  • 2e3a54f0-6754-11ea-a1c2-e3a8bc9f7aca
  • 40b9a450-66a0-11ea-be1b-2bd3fef48984 
DELETE api/cases?ids=%5B%222e3a54f0-6754-11ea-a1c2-e3a8bc9f7aca%22%2C%2240b9a450-66a0-11ea-be1b-2bd3fef48984%22%5D

Response code

edit
204
Indicates a successful call.
« Delete all comments Set default SIEM UI connector »