Clean up detection alert migrations

Base URL
https://{kibana_url}
  • DELETE /api/detection_engine/signals/migration
Auth Deprecated

DEPRECATED. Cleanup API for old migration artifacts. Do not add new call sites. WARNING: This schedules deletions; ensure no production reads still point at the source index.

Migrations favor data integrity over shard size. Consequently, unused or orphaned indices are artifacts of the migration process. A successful migration can leave both the old and new indices present, so the old index may be deleted. While you can delete these indices manually, the endpoint applies a deletion policy to the relevant index, causing it to be deleted after 30 days, and removes other migration-specific artifacts.

Request body

Array of migration_ids to cleanup

migration_ids string[] · min items: 1 required

Array of migration_ids to cleanup.

Responses

Successful response

application/json
<array> object[]
destinationIndex string required
error object
message string required
status_code integer required
id string required
sourceIndex string required
status enum required
Values: success failure pending
updated string · format: date-time required
version string required

Invalid input data response

application/json
One of:
error string required
message string required
statusCode integer required

Unsuccessful authentication response

application/json
error string required
message string required
statusCode integer required

Internal server error response

application/json
message string required
status_code integer required
Base URL
https://{kibana_url}