For AI agents: A markdown version of this page is available at https://dnd37xeb23o8n.cloudfront.net/stefon.simmons/docs-astro-web-10435/api/latest/security-monitoring/bulk-delete-security-monitoring-rules.md. A documentation index is available at /llms.txt.
Language
Datadog site

Bulk delete security monitoring rules

DELETEhttps://api.datadoghq.com/api/v2/security_monitoring/rules/bulk_deletehttps://api.us3.datadoghq.com/api/v2/security_monitoring/rules/bulk_deletehttps://api.us5.datadoghq.com/api/v2/security_monitoring/rules/bulk_deletehttps://api.datadoghq.eu/api/v2/security_monitoring/rules/bulk_deletehttps://api.ap1.datadoghq.com/api/v2/security_monitoring/rules/bulk_deletehttps://api.ap2.datadoghq.com/api/v2/security_monitoring/rules/bulk_deletehttps://api.uk1.datadoghq.com/api/v2/security_monitoring/rules/bulk_deletehttps://api.ddog-gov.com/api/v2/security_monitoring/rules/bulk_deletehttps://api.us2.ddog-gov.com/api/v2/security_monitoring/rules/bulk_delete

Overview

Delete multiple security monitoring rules in a single request. Default rules cannot be deleted.

This endpoint requires the security_monitoring_rules_write permission.

OAuth apps require the security_monitoring_rules_write authorization scope to access this endpoint.

Request

Body Data (required)

Field
Type
Description
data [required]
object

Data for bulk deleting security monitoring rules.

Response

OK

Response for bulk deleting security monitoring rules.

Field
Type
Description
data
object

Data for the bulk delete response.

Code Example

Bulk delete security monitoring rules
# Set your Datadog site and credentials
export DD_SITE="datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X DELETE "https://api.${DD_SITE}/api/v2/security_monitoring/rules/bulk_delete" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "ruleIds": [
        "abc-000-u7q",
        "abc-000-7dd"
      ]
    },
    "id": "bulk_delete",
    "type": "bulk_delete_rules"
  }
}
EOF
# Set your Datadog site and credentials
export DD_SITE="us3.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X DELETE "https://api.${DD_SITE}/api/v2/security_monitoring/rules/bulk_delete" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "ruleIds": [
        "abc-000-u7q",
        "abc-000-7dd"
      ]
    },
    "id": "bulk_delete",
    "type": "bulk_delete_rules"
  }
}
EOF
# Set your Datadog site and credentials
export DD_SITE="us5.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X DELETE "https://api.${DD_SITE}/api/v2/security_monitoring/rules/bulk_delete" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "ruleIds": [
        "abc-000-u7q",
        "abc-000-7dd"
      ]
    },
    "id": "bulk_delete",
    "type": "bulk_delete_rules"
  }
}
EOF
# Set your Datadog site and credentials
export DD_SITE="datadoghq.eu"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X DELETE "https://api.${DD_SITE}/api/v2/security_monitoring/rules/bulk_delete" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "ruleIds": [
        "abc-000-u7q",
        "abc-000-7dd"
      ]
    },
    "id": "bulk_delete",
    "type": "bulk_delete_rules"
  }
}
EOF
# Set your Datadog site and credentials
export DD_SITE="ap1.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X DELETE "https://api.${DD_SITE}/api/v2/security_monitoring/rules/bulk_delete" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "ruleIds": [
        "abc-000-u7q",
        "abc-000-7dd"
      ]
    },
    "id": "bulk_delete",
    "type": "bulk_delete_rules"
  }
}
EOF
# Set your Datadog site and credentials
export DD_SITE="ap2.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X DELETE "https://api.${DD_SITE}/api/v2/security_monitoring/rules/bulk_delete" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "ruleIds": [
        "abc-000-u7q",
        "abc-000-7dd"
      ]
    },
    "id": "bulk_delete",
    "type": "bulk_delete_rules"
  }
}
EOF
# Set your Datadog site and credentials
export DD_SITE="uk1.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X DELETE "https://api.${DD_SITE}/api/v2/security_monitoring/rules/bulk_delete" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "ruleIds": [
        "abc-000-u7q",
        "abc-000-7dd"
      ]
    },
    "id": "bulk_delete",
    "type": "bulk_delete_rules"
  }
}
EOF
# Set your Datadog site and credentials
export DD_SITE="ddog-gov.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X DELETE "https://api.${DD_SITE}/api/v2/security_monitoring/rules/bulk_delete" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "ruleIds": [
        "abc-000-u7q",
        "abc-000-7dd"
      ]
    },
    "id": "bulk_delete",
    "type": "bulk_delete_rules"
  }
}
EOF
# Set your Datadog site and credentials
export DD_SITE="us2.ddog-gov.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X DELETE "https://api.${DD_SITE}/api/v2/security_monitoring/rules/bulk_delete" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "ruleIds": [
        "abc-000-u7q",
        "abc-000-7dd"
      ]
    },
    "id": "bulk_delete",
    "type": "bulk_delete_rules"
  }
}
EOF