Skip to content

Remove FalconCorrelationRule

bk-cs edited this page Dec 19, 2024 · 1 revision

Remove-FalconCorrelationRule

SYNOPSIS

Remove Falcon NGSIEM correlation rules

DESCRIPTION

Requires 'Correlation Rules: Write'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
Id String[] Correlation rule identifier X X

SYNTAX

Remove-FalconCorrelationRule [-Id] <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

DELETE /correlation-rules/entities/rules/v1

falconpy

entities_rules_delete_v1

USAGE

2024-12-19: PSFalcon v2.2.8

Clone this wiki locally