Delete selected endpoints in the Cortex XDR app. You can delete up to 1000 endpoints.
Note: Endpoints are deleted from the Cortex XDR app web interface, however they still exist in the database.
When filtering by multiple fields: - Response is concatenated using AND condition (OR is not supported). - Maximum result set size is 1000. - Offset is the zero-based number of incidents from the start of the result set.
Required license: Cortex XDR Prevent or Cortex XDR Pro per Endpoint
curl -X POST \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
"https://api-yourfqdn/public_api/v1/endpoints/delete" \
-d '{
"request_data" : {
"filters" : [ {
"field" : "field",
"value" : [ "value", "value" ],
"operator" : "in"
}, {
"field" : "field",
"value" : [ "value", "value" ],
"operator" : "in"
} ]
}
}'
{"request_data":{"filters":[{"field":"endpoint_id_list","operator":"in","value":[""]}]}}
String that identifies a list the filters match. Filters are based on the following keywords:
endpoint_id_list: List of endpoint IDs.
String that identifies the comparison operator you want to use for this filter. Valid keywords and values are:
in
endpoint_id_list: List of strings
Value that this filter must match. Valid keywords:
endpoint_id_list: List of strings
Successful response
Bad Request. Got an invalid JSON.
{"line": 1, "column": 19, "message": "no viable alternative at input '|alter2'"}
Unauthorized access. An issue occurred during authentication. This can indicate an incorrect key, id, or other invalid authentication parameters.
{"line": 1, "column": 19, "message": "no viable alternative at input '|alter2'"}
Unauthorized access. User does not have the required license type to run this API.
{"line": 1, "column": 19, "message": "no viable alternative at input '|alter2'"}
Forbidden access. The provided API Key does not have the required RBAC permissions to run this API.
{"line": 1, "column": 19, "message": "no viable alternative at input '|alter2'"}
Internal server error. A unified status for API communication type errors.
{"line": 1, "column": 19, "message": "no viable alternative at input '|alter2'"}