---
title: "Delete a Pipeline within a Pack"
method: DELETE
path: "/p/{pack}/pipelines/{id}"
tags: ["pipelines"]
---

# Delete a Pipeline within a Pack

`DELETE /p/{pack}/pipelines/{id}`

Delete the specified Pipeline within the specified Pack.

## Path parameters

- `id` string, required
- `pack` string, required

## Response `200`

The deleted Pipeline object in a single-item list.

- CountedPipeline
  - `count` integer, required — number of items present in the items array
  - `items` Pipeline[], required — List of items in this response.
    - `id` string, required — Unique identifier for the Pipeline.
    - `conf` object, required — Configuration for the Pipeline, including functions and settings.
      - `asyncFuncTimeout` integer — Timeout (in milliseconds) for asynchronous Pipeline functions.
      - `output` string — The output destination for events processed by this Pipeline.
      - `description` string — Brief description of the Pipeline.
      - `streamtags` string[] — Metadata tags used for categorization and filtering.
      - `functions` PipelineFunctionConf[] — List of Functions to pass data through the Pipeline.
        - union
          - PipelineFunctionAggregateMetrics
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'aggregate_metrics', required — Identifier of the Function. Always <code>aggregate_metrics</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaAggregateMetrics, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionAggregation
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'aggregation', required — Identifier of the Function. Always <code>aggregation</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaAggregation, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionAutoTimestamp
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'auto_timestamp', required — Identifier of the Function. Always <code>auto_timestamp</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaAutoTimestamp, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionCef
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'cef', required — Identifier of the Function. Always <code>cef</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaCef, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionChain
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'chain', required — Identifier of the Function. Always <code>chain</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaChain, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionClone
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'clone', required — Identifier of the Function. Always <code>clone</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaClone, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionCode
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'code', required — Identifier of the Function. Always <code>code</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaCode, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionComment
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'comment', required — Identifier of the Function. Always <code>comment</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaComment, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionDistinct
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'distinct', required — Identifier of the Function. Always <code>distinct</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaDistinct, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionDnsLookup
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'dns_lookup', required — Identifier of the Function. Always <code>dns_lookup</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaDnsLookup, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionDrop
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'drop', required — Identifier of the Function. Always <code>drop</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaDrop, required
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionDropDimensions
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'drop_dimensions', required — Identifier of the Function. Always <code>drop_dimensions</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaDropDimensions, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionDynamicSampling
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'dynamic_sampling', required — Identifier of the Function. Always <code>dynamic_sampling</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaDynamicSampling, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionEval
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'eval', required — Identifier of the Function. Always <code>eval</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaEval, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionEventBreaker
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'event_breaker', required — Identifier of the Function. Always <code>event_breaker</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` union, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionEventstats
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'eventstats', required — Identifier of the Function. Always <code>eventstats</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaEventstats, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionExternaldata
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'externaldata', required — Identifier of the Function. Always <code>externaldata</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaExternaldata, required
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionFlatten
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'flatten', required — Identifier of the Function. Always <code>flatten</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaFlatten, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionFoldkeys
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'foldkeys', required — Identifier of the Function. Always <code>foldkeys</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaFoldkeys, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionGenStats
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'gen_stats', required — Identifier of the Function. Always <code>gen_stats</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaGenStats, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionGeoip
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'geoip', required — Identifier of the Function. Always <code>geoip</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaGeoip, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionGrok
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'grok', required — Identifier of the Function. Always <code>grok</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaGrok, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionHandlebars
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'handlebars', required — Identifier of the Function. Always <code>handlebars</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaHandlebars, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionJoin
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'join', required — Identifier of the Function. Always <code>join</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaJoin, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionJsonUnroll
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'json_unroll', required — Identifier of the Function. Always <code>json_unroll</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaJsonUnroll, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionLakeExport
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'lake_export', required — Identifier of the Function. Always <code>lake_export</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaLakeExport, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionLimit
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'limit', required — Identifier of the Function. Always <code>limit</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaLimit, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionLocalSearchDatatypeParser
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'local_search_datatype_parser', required — Identifier of the Function. Always <code>local_search_datatype_parser</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaLocalSearchDatatypeParser, required
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionLocalSearchRulesetRunner
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'local_search_ruleset_runner', required — Identifier of the Function. Always <code>local_search_ruleset_runner</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaLocalSearchRulesetRunner, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionLocalSearchSchemaMapper
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'local_search_schema_mapper', required — Identifier of the Function. Always <code>local_search_schema_mapper</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaLocalSearchSchemaMapper, required
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionLocalSearchTimeRangeNormalizer
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'local_search_time_range_normalizer', required — Identifier of the Function. Always <code>local_search_time_range_normalizer</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaLocalSearchTimeRangeNormalizer, required
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionLocalSearchTransformer
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'local_search_transformer', required — Identifier of the Function. Always <code>local_search_transformer</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaLocalSearchTransformer, required
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionLookup
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'lookup', required — Identifier of the Function. Always <code>lookup</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaLookup, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionMask
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'mask', required — Identifier of the Function. Always <code>mask</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaMask, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionMetricsExport
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'metrics_export', required — Identifier of the Function. Always <code>metrics_export</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaMetricsExport, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionMvExpand
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'mv_expand', required — Identifier of the Function. Always <code>mv_expand</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaMvExpand, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionMvPull
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'mv_pull', required — Identifier of the Function. Always <code>mv_pull</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaMvPull, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionNotificationPolicies
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'notification_policies', required — Identifier of the Function. Always <code>notification_policies</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaNotificationPolicies, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionNotifications
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'notifications', required — Identifier of the Function. Always <code>notifications</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaNotifications, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionNotify
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'notify', required — Identifier of the Function. Always <code>notify</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaNotify, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionNumerify
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'numerify', required — Identifier of the Function. Always <code>numerify</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` union, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionOtlpLogs
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'otlp_logs', required — Identifier of the Function. Always <code>otlp_logs</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaOtlpLogs, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionOtlpMetrics
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'otlp_metrics', required — Identifier of the Function. Always <code>otlp_metrics</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaOtlpMetrics, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionOtlpTraces
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'otlp_traces', required — Identifier of the Function. Always <code>otlp_traces</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaOtlpTraces, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionPack
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'pack', required — Identifier of the Function. Always <code>pack</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaPack, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionPivot
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'pivot', required — Identifier of the Function. Always <code>pivot</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaPivot, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionPublishMetrics
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'publish_metrics', required — Identifier of the Function. Always <code>publish_metrics</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaPublishMetrics, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionRedis
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'redis', required — Identifier of the Function. Always <code>redis</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` union, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionRegexExtract
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'regex_extract', required — Identifier of the Function. Always <code>regex_extract</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaRegexExtract, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionRegexFilter
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'regex_filter', required — Identifier of the Function. Always <code>regex_filter</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaRegexFilter, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionRename
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'rename', required — Identifier of the Function. Always <code>rename</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaRename, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionRollupMetrics
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'rollup_metrics', required — Identifier of the Function. Always <code>rollup_metrics</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaRollupMetrics, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionSampling
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'sampling', required — Identifier of the Function. Always <code>sampling</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaSampling, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionSearchEngineExport
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'search_engine_export', required — Identifier of the Function. Always <code>search_engine_export</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaSearchEngineExport, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionSend
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'send', required — Identifier of the Function. Always <code>send</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaSend, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionSensitiveDataScanner
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'sensitive_data_scanner', required — Identifier of the Function. Always <code>sensitive_data_scanner</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaSensitiveDataScanner, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionSerde
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'serde', required — Identifier of the Function. Always <code>serde</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` union, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionSerialize
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'serialize', required — Identifier of the Function. Always <code>serialize</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` union, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionSidlookup
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'sidlookup', required — Identifier of the Function. Always <code>sidlookup</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaSidlookup, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionSignalFilter
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'signal_filter', required — Identifier of the Function. Always <code>signal_filter</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaSignalFilter, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionSnmpTrapSerialize
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'snmp_trap_serialize', required — Identifier of the Function. Always <code>snmp_trap_serialize</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaSnmpTrapSerialize, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionSort
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'sort', required — Identifier of the Function. Always <code>sort</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaSort, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionStore
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'store', required — Identifier of the Function. Always <code>store</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaStore, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionSuppress
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'suppress', required — Identifier of the Function. Always <code>suppress</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaSuppress, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionTee
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'tee', required — Identifier of the Function. Always <code>tee</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaTee, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionTrimTimestamp
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'trim_timestamp', required — Identifier of the Function. Always <code>trim_timestamp</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaTrimTimestamp, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionUnion
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'union', required — Identifier of the Function. Always <code>union</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaUnion, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionUnroll
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'unroll', required — Identifier of the Function. Always <code>unroll</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaUnroll, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionWindow
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'window', required — Identifier of the Function. Always <code>window</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaWindow, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
          - PipelineFunctionXmlUnroll
            - `filter` string — JavaScript expression that selects data to pass through the Function.
            - `id` 'xml_unroll', required — Identifier of the Function. Always <code>xml_unroll</code>
            - `description` string — Brief description of the Pipeline function.
            - `disabled` boolean — If <code>true</code>, disable the Pipeline function so that events are not passed through it. Otherwise, <code>false</code>.
            - `final` boolean — If <code>true</code>, stop passing events to downstream Pipeline Functions after the Function executes. Otherwise, <code>false</code>.
            - `conf` FunctionConfSchemaXmlUnroll, required
              - …
            - `groupId` string — Unique identifier of the group that contains the Pipeline Function.
      - `groups` object — Named groups of Pipeline functions for organizational display in the UI.
      - `__template_streamtags` string — Binds 'streamtags' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'streamtags' at runtime.

## Other responses

- `401` — Authentication failed (missing or invalid credentials or Bearer token).
- `500` — Unexpected server error.

---

[API](https://skmtc.net/criblio/apis/cribl-api-reference.md) · [All operations](https://skmtc.net/criblio/apis/cribl-api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/criblio/cribl-api-reference/versions/e9bef570d106/schema)