Delete rules from a rule group by ID. The following permission is required to run this action:
  • Custom IOA rules.
External DocumentationTo learn more, visit the CrowdStrike documentation.

​
Basic Parameters

ParameterDescription
Parent Rule Group IDThe parent rule group ID.
Rules IDsA comma-separated list rules IDs to be deleted. You can find the rule ID in the Custom IOA Rule Groups page.
User IDThe user ID. You can find it in the User Profile page.

​
Advanced Parameters

ParameterDescription
CommentExplains why the entity is being deleted.

​
Example Output

{
	"errors": [
		{
			"code": 0,
			"id": "string",
			"message": "string"
		}
	],
	"meta": {
		"pagination": {
			"limit": 0,
			"offset": 0,
			"total": 0
		},
		"powered_by": "string",
		"query_time": 0,
		"trace_id": "string",
		"writes": {
			"resources_affected": 0
		}
	}
}

​
Workflow Library Example

Delete Rules with Crowdstrike and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop