Delete an action from a monitoring rule based on the action ID.
External DocumentationTo learn more, visit the CrowdStrike documentation.

​
Parameters

ParameterDescription
Action IDThe ID of the action. You can find the action ID in the IOC Management page.

​
Example Output

{
	"errors": [
		{
			"code": 0,
			"details": [
				{
					"field": "string",
					"message": "string",
					"message_key": "string"
				}
			],
			"id": "string",
			"message": "string",
			"message_key": "string"
		}
	],
	"meta": {
		"pagination": {
			"limit": 0,
			"offset": 0,
			"total": 0
		},
		"powered_by": "string",
		"query_time": 0,
		"trace_id": "string",
		"writes": {
			"resources_affected": 0
		}
	},
	"resources": [
		"string"
	]
}

​
Workflow Library Example

Delete Action with Crowdstrike and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop