Bulk edit, duplicate or delete detection rules
One step with Elastic Stack. We can help you get access.
Get something done
Bulk edit, duplicate or delete detection rules
with Elastic Stack · Threat Detection & Response Management
Use Elastic Stack: its Kibana Security Detections API lets you bulk edit, duplicate or delete detection rules in a single step (POST /api/detection_engine/rules/_bulk_action). capabilities.work can help you get signed up and connected.
- Can I enable, duplicate or delete many detection rules at once?
- Is there a dry run to see which rules a bulk action would affect?
Say it to your AI assistant
- Apply a bulk edit to all detection rules matching my query.
- Dry-run a bulk delete of these rules first ({dry_run}).
For your developer
POST /api/detection_engine/rules/_bulk_action in Kibana Security Detections API. Full spec on APIs.io.