post
/public_api/v2/xql/delete_dataset
Delete a dataset with the specified name. The following dataset types can be deleted: Lookup, Raw, User, Snapshot, and Correlation. You can only delete a dataset with dependencies by setting force
to TRUE.
Note: The System dataset and other protected datasets cannot be deleted.
Required license: Cortex XDR Pro per Endpoint or Cortex XDR Pro per GB
Body parameters
requestObjectrequired
dataset_nameString
The name of the dataset to be deleted.
forceBoolean
Warning: Setting this to True
forces deletion even when there are dependencies.
REQUEST BODY
{
"request": {
"dataset_name": "users",
"force": true
}
}
CURL
curl -X 'POST'
-H
'Accept: application/json'
-H
'Content-Type: application/json'
'https://api-yourfqdn/public_api/v2/xql/delete_dataset'
-d
''
Responses