SUsumologic
threatIntelIngestProducer

Removes indicators by their IDS

Removes indicators by specifying a list of indicator IDs

delete/v1/threatIntel/datastore/indicators

Request

  • Base URL
    https://api.au.sumologic.com/api
  • URL
    https://api.au.sumologic.com/api/v1/threatIntel/datastore/indicators
  • Auth
    HTTP basic

Request body

sourcestring required

The source of the indicator ID to match against

indicatorIdsstring[] required

The list of indicator IDs to match against

Example request

{
  "source": "Crowdstrike",
  "indicatorIds": [
    "indicator--abcd",
    "indicator--ef012"
  ]
}

Response

Indicators successfully removed

Changes

No recorded changes to this operation across all 15 revisions of this API.