---
title: "Cancel a threat hunt"
method: PUT
path: "/threathunting/v1/threathunts/{threatHuntID}/cancel"
tags: ["Threat Hunting"]
---

# Cancel a threat hunt

`PUT /threathunting/v1/threathunts/{threatHuntID}/cancel`

## Request

- Base URL: `https://apis.druva.com/realize`
- URL: `https://apis.druva.com/realize/threathunting/v1/threathunts/{threatHuntID}/cancel`
- Auth: API key in header `Authorization`

Allows you to cancel an ongoing or running threat hunt job.

## Path parameters

- `threatHuntID` integer, required

## Response `200`

OK

- ThreatHuntJobCancelResponse
  - `threatHuntID` integer: The identifier to uniquely identify threat hunt.
  - `message` string

## Other responses

- `400`: Bad Request
- `401`: The request either did not include an authentication token, or you have provided an expired authentication token.
- `404`: The requested resource was not found.
- `500`: Internal Server Error

---

[API](https://skmtc.dev/druva/apis/cyber-resilience.md) - [All operations](https://skmtc.dev/druva/apis/cyber-resilience/llms.txt) - [OpenAPI document](https://skmtc.dev/druva/apis/cyber-resilience/revisions/b149d46c996a?raw)