Delete multiple detection rules

deprecated

Base URL: https://{kibana_url}

POST also DELETE /api/detection_engine/rules/_bulk_delete
POST /s/{space_id}/api/detection_engine/rules/_bulk_delete

Refer to Spaces for more information.

Delete detection rules in bulk.

Warning

This API is deprecated and will be removed in Kibana v9.0.

Authentication

Api key

Authorization: <value>

These APIs use key-based authentication. You must create an API key and use the encoded value in the request header. For example: Authorization: ApiKey base64AccessApiKey

Basic

Authorization: Basic <credentials>

Request body

Responses

Indicates a successful call.

application/json

Invalid input data response

application/json

Unsuccessful authentication response

application/json

Internal server error response

application/json

Base URL: https://{kibana_url}

Examples

Request Console 1 / 2 languages

Console Kibana Dev Tools

POST kbn:/api/detection_engine/rules/_bulk_delete
[
  {
    "rule_id": "process_started_by_ms_office_program_possible_payload"
  },
  {
    "id": "51658332-a15e-4c9e-912a-67214e2e2359"
  }
]

Generated from the API spec

curl Shell

curl -X POST "${KIBANA_URL}/api/detection_engine/rules/_bulk_delete" \
  -H "Authorization: ApiKey ${API_KEY}" \
  -H "Content-Type: application/json" \
  -d '[
    {
      "rule_id": "process_started_by_ms_office_program_possible_payload"
    },
    {
      "id": "51658332-a15e-4c9e-912a-67214e2e2359"
    }
  ]'

Generated from the API spec

Response

No example

Authentication

Request body [{ }]

Responses

Request body