Delete all case comments and alerts

Base URL: https://{kibana_url}

DELETE /api/cases/{caseId}/comments
DELETE /s/{space_id}/api/cases/{caseId}/comments

Auth

Deletes all comments and alerts from a case. The files of any file attachments are also deleted. You must have all privileges for the Cases feature in the Management, Observability, or Security section of the Kibana feature privileges, depending on the owner of the cases you're deleting.

Path parameters

space_id string optional: An identifier for the space. If space_id is not provided in the URL, the default space is used. Refer to Spaces for more information.
caseId string required: The identifier for the case. To retrieve case IDs, use the search cases (_find) API. All non-ASCII characters must be URL encoded.; Example: 9c235210-6834-11ea-a78c-6ffb38a34414

Header parameters

kbn-xsrf string required: Cross-site request forgery protection

Responses

204

Indicates a successful call.

Authorization information is missing or invalid.

application/json

error string
message string
statusCode integer

Base URL: https://{kibana_url}

Examples

Request Console 1 / 2 languages

Console Kibana Dev Tools

DELETE kbn:/api/cases/9c235210-6834-11ea-a78c-6ffb38a34414/comments

curl Shell

curl \
  --request DELETE 'https://localhost:5601/api/cases/9c235210-6834-11ea-a78c-6ffb38a34414/comments' \
  --header "Authorization: $API_KEY" \
  --header "kbn-xsrf: true"

Response

No body

{
  "error": "Unauthorized",
  "message": "Unable to authenticate with the provided credentials.",
  "statusCode": 401
}