Delete all case comments and alerts

Server: https://{kibana_url}

DELETE /api/cases/{caseId}/comments

Deletes all comments and alerts from a case. You must have all privileges for the Cases feature in the Management, Observability, or Security section of the Kibana feature privileges, depending on the owner of the cases you're deleting.

Path Parameters

caseId string required: The identifier for the case. To retrieve case IDs, use the search cases (_find) API. All non-ASCII characters must be URL encoded.

Responses

204

Indicates a successful call.

Authorization information is missing or invalid.

application/json

Examples

Request Console 1 / 2 languages

Console Kibana Dev Tools

DELETE kbn:/api/cases/9c235210-6834-11ea-a78c-6ffb38a34414/comments

curl Shell

curl \
  --request DELETE 'https://localhost:5601/api/cases/9c235210-6834-11ea-a78c-6ffb38a34414/comments' \
  --header "Authorization: $API_KEY" \
  --header "kbn-xsrf: true"

Response

{
  "error": "Unauthorized",
  "message": "Unable to authenticate with the provided credentials.",
  "statusCode": 401
}