---
title: "Delete Case Artifact"
method: DELETE
path: "/connect/case/artifacts/{id}"
tags: ["Cases"]
---

# Delete Case Artifact

`DELETE /connect/case/artifacts/{id}`

Removes a case artifact.
Observables are considered "artifacts" in SOC internal terminology.

## Path parameters

- `id` string, required

## Response `200`

The artifact was successfully removed from the case

## Other responses

- `400` — The provided input object or parameters are malformed or invalid
- `401` — Request was not properly authenticated
- `403` — Insufficient permissions for this request
- `404` — Case artifact not found
- `405` — Case module not configured on server
- `500` — Internal SOC error; review SOC logs

---

[API](https://skmtc.net/security-onion-solutions/apis/security-onion-connect-api.md) · [All operations](https://skmtc.net/security-onion-solutions/apis/security-onion-connect-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/security-onion-solutions/security-onion-connect-api/versions/0576ce393f8d/schema)