---
title: "Detach security findings from their case"
method: DELETE
path: "/api/v2/security/findings/cases"
tags: ["Security Monitoring"]
---

# Detach security findings from their case

`DELETE /api/v2/security/findings/cases`

## Request

- Base URL: `https://api.datadoghq.com`
- URL: `https://api.datadoghq.com/api/v2/security/findings/cases`
- Auth: one of:
  - API key in header `DD-API-KEY` and API key in header `DD-APPLICATION-KEY`
  - OAuth 2
    - Authorization code: `/oauth2/v1/authorize`
    - Token URL: `/oauth2/v1/token`

Detach security findings from their case.
This operation dissociates security findings from their associated cases without deleting the cases themselves. You can detach security findings from multiple different cases in a single request, with a limit of 50 security findings per request. Security findings that are not currently attached to any case will be ignored.

## Request body

- DetachCaseRequest: Request for detaching security findings from their case.
  - `data` DetachCaseRequestData: Data for detaching security findings from their case.
    - `relationships` DetachCaseRequestDataRelationships: Relationships detaching security findings from their case.
      - `findings` Findings, required: A list of security findings.
        - `data` FindingData[]: Array of security finding data objects.
          - `id` string, required: Unique identifier of the security finding.
          - `type` 'findings', required: Security findings resource type.
    - `type` 'cases', required: Cases resource type.

## Response `204`

No Content

## Other responses

- `400`: Bad Request
- `404`: Not Found
- `429`: Too many requests

---

[API](https://skmtc.dev/datadog/apis/datadog-api-v2-collection.md) - [All operations](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/llms.txt) - [OpenAPI document](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/revisions/da68bf029e4c?raw)