Delete an async EQL search Added in 7.9.0
Delete an async EQL search or a stored synchronous EQL search. The API also deletes results for the search.
Path parameters
-
Identifier for the search to delete. A search ID is provided in the EQL search API's response for an async search. A search ID is also provided if the request’s
keep_on_completion
parameter istrue
.
DELETE /_eql/search/{id}
curl \
-X DELETE http://api.example.com/_eql/search/{id}
Response examples (200)
{
"acknowledged": true
}