› › ›

Delete pack API

[preview] This functionality is in technical preview and may be changed or removed in a future release. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features. Delete packs.

Once you delete a pack, it cannot be recovered.

Request

edit

DELETE <kibana host>:<port>/api/osquery/packs/<id>

DELETE <kibana host>:<port>/s/<space_id>/api/osquery/packs/<id>

Path parameters

edit

space_id: (Optional, string) The space identifier. When space_id is not provided in the URL, the default space is used.
id: (Required, string) The ID of the pack you want to delete.

Response code

edit

200: Indicates that the pack is deleted. Returns an empty response body.

Example

edit

Delete a pack object with the bbe5b070-0c51-11ed-b0f8-ad31b008e832 ID:

$ curl -X DELETE api/osquery/packs/bbe5b070-0c51-11ed-b0f8-ad31b008e832

« Update pack API Get saved query API »