---
title: "Manage Detections in Bulk"
method: POST
path: "/connect/detection/bulk/{newStatus}"
tags: ["Detections"]
---

# Manage Detections in Bulk

`POST /connect/detection/bulk/{newStatus}`

Enables, disables, or deletes multiple detections asynchronously.

## Path parameters

- `newStatus` 'enable' | 'disable' | 'delete', required

## Request body

- ServerBulkOp
  - `ids` string[] — The list of detection IDs to bulk update when a specific query is not provided
  - `query` string — The query string to use for matching detections, or leave empty if providing a list of internal detection IDs"

## Response `202`

Returns the bulk operation response

- ServerBulkResp
  - `count` integer — The count of detections that were submitted to be updated or deleted in bulk

## Other responses

- `400` — The provided input object or parameters are malformed or invalid
- `401` — Request was not properly authenticated
- `403` — Insufficient permissions for this request
- `500` — Internal SOC error; review SOC logs

---

[API](https://skmtc.net/security-onion-solutions/apis/security-onion-connect-api.md) · [All operations](https://skmtc.net/security-onion-solutions/apis/security-onion-connect-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/security-onion-solutions/security-onion-connect-api/revisions/0576ce393f8d/schema)