To delete all scheduled searches as well as all associated search result reports, send the following request:
DELETE https://<IA_IP_address>:<port_number>/scheduledsearch/v1/watch
Required header:
Cookie: px=<token>
Note
To use this request, your user account must be assigned to the Admin role.
Options
IA_IP_address—The IP address of the NDR appliance running the NDR API.
port_number—The port number of the NDR appliance running the NDR API.
token—This token authenticates the session. By default, the session times out after 24 hours.
Example
DELETE https://xxx.xxx.xxx.xxx:443/scheduledsearch/v1/watch
Required header:
Cookie: px=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Delete all scheduled searches: Response
HTTP/1.1 [Response Code] [Response Message] Server: [Server] Date: [Date] Content-Type: [Content Type]
Response fields
Response Code—A standard HTTP response code.
200—Request successful; the specified information was deleted.
410—Request unsuccessful because the scheduled searches do not exist.
Response Message—A standard HTTP response message.
OK—Request successful; the specified information was deleted.
Gone—Request unsuccessful because the scheduled searches do not exist.
Server—The server being used.
Date—Standard HTML date format.
Content Type—The response format.
Example
HTTP/1.1 200 OK Server: nginx Date: Thu, 06 Apr 2017 19:28:21 GMT Content-Type: application/json; charset=utf-8
cURL code sample: Delete all scheduled searches
curl -X DELETE -k --cookie "px=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" https://xxx.xxx.xxx.xxx:443/scheduledsearch/v1/watch
This cURL sample includes the following options:
-X DELETE—This option specifies using the DELETE method.-k—This option explicitly allows cURL to perform insecure SSL connections and transfers, which allows you to test your SSL connection without installing a CA certificate.--cookie "px=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"—This option specifies the authentication token for this session.https://xxx.xxx.xxx.xxx:443/scheduledsearch/v1/watch—The scheduled search request URL. Replacexxx.xxx.xxx.xxxwith the IP address of your NDR appliance.
Results
This example deletes all scheduled searches as well as all associated search result reports.