---
title: "Cancel Active Query"
method: GET
path: "/connect/query/cancel/{queryId}"
tags: ["Query"]
---

# Cancel Active Query

`GET /connect/query/cancel/{queryId}`

Requests that the event storage system cancel a specific query identified by the provided input ID.
Note that not all queries can be canceled.
Requires a Security Onion Pro license.

## Path parameters

- `queryId` string, required

## Response `200`

The query cancelation was submitted (may or may not actually get canceled)

- object

## Other responses

- `400` — Query could not be canceled
- `401` — Request was not properly authenticated
- `403` — Insufficient permissions for this request
- `404` — Query was not found
- `500` — Internal SOC error; review SOC logs

---

[API](https://skmtc.net/security-onion-solutions/apis/security-onion-connect-api.md) · [All operations](https://skmtc.net/security-onion-solutions/apis/security-onion-connect-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/security-onion-solutions/security-onion-connect-api/versions/0576ce393f8d/schema)