v53

latestOpenAPI 3.0.3raw.githubusercontent.com2026-08-076771,7565.2 MB
Security Entity Analytics API

Delete an asset criticality record

Spaces method and path for this operation:

<div><span class="operation-verb delete">delete</span>&nbsp;<span class="operation-path">/s/{space_id}/api/asset_criticality</span></div>

Refer to Spaces for more information.

Deprecated in 9.4.0. Use the Entity Store APIs to unassign asset criticality for a specific entity.

Delete the asset criticality record for a specific entity.

delete/api/asset_criticality

Query parameters

id_valuestring required

The ID value of the asset.

id_field'host.name' | 'user.name' | 'service.name' | 'entity.id' required

The field representing the ID.

refresh'wait_for'

If 'wait_for' the request will wait for the index refresh.

Response

Successful response

deletedboolean required

True if the record was deleted or false if the record did not exist.

Example response

{
  "record": {
    "@timestamp": "2024-08-02T11:15:34.290Z",
    "asset": {
      "criticality": "high_impact"
    },
    "criticality_level": "high_impact",
    "host": {
      "asset": {
        "criticality": "high_impact"
      },
      "name": "my_host"
    },
    "id_field": "host.name",
    "id_value": "my_host"
  }
}