xql_delete_dataset
Delete a dataset by name from XSIAM. Optionally force deletion when dependencies exist, but protected datasets cannot be removed.
Instructions
Delete a dataset
Delete a dataset with the specified name. The following dataset types can be deleted: Lookup, Raw, User, Snapshot, and Correlation. You can only delete a dataset with dependencies by setting force to TRUE.
Note: The System dataset and other protected datasets cannot be deleted.
Required license: Cortex XSIAM Premium or Cortex XSIAM Enterprise or Cortex XSIAM Enterprise Plus
[POST /public_api/v2/xql/delete_dataset] · Dataset Management
Example request body:
{
"dataset_name": "users",
"force": "yes"
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| request_data | No |