cases

Delete a case attachment

Spaces method and path for this operation:

<div><span class="operation-verb delete">delete</span>&nbsp;<span class="operation-path">/s/{space_id}/api/cases/{caseId}/attachments/{attachmentId}</span></div>

Refer to Spaces for more information.

Deletes a single attachment from a case. If it's a file, the file is also deleted. If it's an attack (security.attack), the alerts it added are also removed from the case, unless they're attached separately or by another attack. You must have all privileges for the Cases feature in the Management, Observability, or Security section of the Kibana feature privileges, depending on the owner of the case.

delete/api/cases/{caseId}/attachments/{attachmentId}

Request

  • Base URL
    https://localhost:5601
  • URL
    https://localhost:5601/api/cases/{caseId}/attachments/{attachmentId}
  • Auth
    • API key in header Authorization
    • or HTTP basic

Path parameters

caseIdstring required
Example:9c235210-6834-11ea-a78c-6ffb38a34414

The identifier for the case. To retrieve case IDs, use the search cases (_find) API. All non-ASCII characters must be URL encoded.

attachmentIdstring required
Example:71ec1870-725b-11ea-a0b2-c51ea50a58e2

The ID of the attachment, which is its id field, not attachmentId. To get it, use the find case attachments API.

Headers

kbn-xsrfstring required

Cross-site request forgery protection

Response

Indicates a successful call.

Changes

No operation changes recorded.