Security Entity Analytics API
Delete an asset criticality record
Spaces method and path for this operation:
<div><span class="operation-verb delete">delete</span> <span class="operation-path">/s/{space_id}/api/asset_criticality</span></div>Refer to Spaces for more information.
Deprecated in 9.4.0. Use the Entity Store APIs to unassign asset criticality for a specific entity.
Delete the asset criticality record for a specific entity.
delete/api/asset_criticality
Query parameters
id_valuestring required
The ID value of the asset.
id_field'host.name' | 'user.name' | 'service.name' | 'entity.id' required
The field representing the ID.
refresh'wait_for'
If 'wait_for' the request will wait for the index refresh.
Response
Successful response
Example response
{
"record": {
"@timestamp": "2024-08-02T11:15:34.290Z",
"asset": {
"criticality": "high_impact"
},
"criticality_level": "high_impact",
"host": {
"asset": {
"criticality": "high_impact"
},
"name": "my_host"
},
"id_field": "host.name",
"id_value": "my_host"
}
}