Delete cases APIedit

Deletes one or more cases.

For the most up-to-date API details, refer to the open API specification.


DELETE <kibana host>:<port>/api/cases?ids=["<case ID1>","<case ID2>"]

DELETE <kibana host>:<port>/s/<space_id>/api/cases?ids=["<case ID1>","<case ID2>"]


You must have read or all privileges and the delete sub-feature privilege for the Cases feature in the Management, Observability, or Security section of the Kibana feature privileges, depending on the owner of the cases you’re deleting.

Path parametersedit

(Optional, string) An identifier for the space. If it is not specified, the default space is used.

Query parametersedit


(Required, string) The cases that you want to remove. To retrieve case IDs, use Find cases.

All non-ASCII characters must be URL encoded.

Response codesedit

Indicates a successful call.


Delete cases with these IDs:

  • 2e3a54f0-6754-11ea-a1c2-e3a8bc9f7aca
  • 40b9a450-66a0-11ea-be1b-2bd3fef48984
DELETE api/cases?ids=%5B%222e3a54f0-6754-11ea-a1c2-e3a8bc9f7aca%22%2C%2240b9a450-66a0-11ea-be1b-2bd3fef48984%22%5D