---
title: "Detach security findings from their case"
method: DELETE
path: "/api/v2/security/findings/cases"
tags: ["Security Monitoring"]
---

# Detach security findings from their case

`DELETE /api/v2/security/findings/cases`

Detach security findings from their case.
This operation dissociates security findings from their associated cases without deleting the cases themselves. You can detach security findings from multiple different cases in a single request, with a limit of 50 security findings per request. Security findings that are not currently attached to any case will be ignored.

## Request body

- DetachCaseRequest — Request for detaching security findings from their case.
  - `data` DetachCaseRequestData — Data for detaching security findings from their case.
    - `relationships` DetachCaseRequestDataRelationships — Relationships detaching security findings from their case.
      - `findings` Findings, required — A list of security findings.
        - `data` FindingData[] — Array of security finding data objects.
          - `id` string, required — Unique identifier of the security finding.
          - `type` 'findings', required — Security findings resource type.
    - `type` 'cases', required — Cases resource type.

## Response `204`

No Content

## Other responses

- `400` — Bad Request
- `404` — Not Found
- `429` — Too many requests

---

[API](https://skmtc.net/datadog/apis/api-v2.md) · [All operations](https://skmtc.net/datadog/apis/api-v2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/datadog/api-v2/versions/da68bf029e4c/schema)