Deactivate or delete detection rule

"Soft delete" a detection rule and remove it from the detection rule dets.

Service endpoint

/rules/v2/{rule_id}/deactivate

Optional query string parameters

—

Example

https://protectapi.cylance.com/rules/v2/c407f28a-3805-4014-b32c-0c2553ac1e10/deactivate

Method

HTTP/1.1 POST

Request headers
  • Accept: application/json
  • Authorization: Bearer JWT Token returned by Auth API with the opticsrule:update scope encoded

Request

None

Response

Please see the Response status codes for more information.

Detection rule sets are not automatically communicated to all endpoints when updates to detection rules are made. To ensure that the latest logic is applied to endpoints in the quickest manner, re-save any affected detection rule sets (either via the UI or API).