Security Detections API
Clean up detection alert migrations
Spaces method and path for this operation:
<div><span class="operation-verb delete">delete</span> <span class="operation-path">/s/{space_id}/api/detection_engine/signals/migration</span></div>Refer to Spaces for more information.
DEPRECATED. Cleanup API for old migration artifacts. Do not add new call sites. WARNING: This schedules deletions; ensure no production reads still point at the source index.
Migrations favor data integrity over shard size. Consequently, unused or orphaned indices are artifacts of the migration process. A successful migration can leave both the old and new indices present, so the old index may be deleted. While you can delete these indices manually, the endpoint applies a deletion policy to the relevant index, causing it to be deleted after 30 days, and removes other migration-specific artifacts.
delete/api/detection_engine/signals/migration
Request body
Example request
{
"migration_ids": [
"924f7c50-505f-11eb-ae0a-3fa2e626a51d"
]
}Response
Successful response