Delete async EQL search API

This functionality is experimental and may be changed or removed completely in a future release. Elastic will take a best effort approach to fix any issues, but experimental features are not subject to the support SLA of official GA features.

Deletes an async EQL search or a stored synchronous EQL search. The API also deletes results for the search.

DELETE /_eql/search/FkpMRkJGS1gzVDRlM3g4ZzMyRGlLbkEaTXlJZHdNT09TU2VTZVBoNDM3cFZMUToxMDM=

Request

DELETE /_eql/search/<search_id>

Prerequisites

See Required fields.

Limitations

See EQL limitations.

Path parameters

<search_id>

(Required, string) Identifier for the search to delete.

A search ID is provided in the EQL search API‘s response for an async search. A search ID is also provided if the request’s keep_on_completion parameter is true.