---
title: "Bulk delete security monitoring rules"
method: DELETE
path: "/api/v2/security_monitoring/rules/bulk_delete"
tags: ["Security Monitoring"]
---

# Bulk delete security monitoring rules

`DELETE /api/v2/security_monitoring/rules/bulk_delete`

Delete multiple security monitoring rules in a single request. Default rules cannot be deleted.

## Request body

- SecurityMonitoringRuleBulkDeletePayload — Payload for bulk deleting security monitoring rules.
  - `data` SecurityMonitoringRuleBulkDeleteData, required — Data for bulk deleting security monitoring rules.
    - `attributes` SecurityMonitoringRuleBulkDeleteAttributes, required — Attributes for bulk deleting security monitoring rules.
      - `ruleIds` string[], required — List of rule IDs to delete.
    - `type` 'bulk_delete_rules', required — The resource type for a bulk delete request.

## Response `200`

OK

- SecurityMonitoringRuleBulkDeleteResponse — Response for bulk deleting security monitoring rules.
  - `deletedRules` string[] — List of successfully deleted rule IDs.
  - `failedRules` string[] — List of rule IDs that could not be deleted.

## Other responses

- `400` — Bad Request
- `403` — Not Authorized
- `404` — Not Found
- `429` — Too many requests

---

[API](https://skmtc.dev/datadog/apis/api-v2.md) · [All operations](https://skmtc.dev/datadog/apis/api-v2/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/datadog/api-v2/revisions/da68bf029e4c/schema)