Actions85
- Alert Actions
- Asset Actions
- Case Actions
- Comment Actions
- Datastore File Actions
- Datastore Folder Actions
- Evidence Actions
- IOC Actions
- Manage Metadata Actions
- Module Actions
- Note Actions
- Note Group Actions
- Task Actions
- Timeline Actions
Alert → Delete
AI-generatedOverview
This node operation deletes an alert in the DFIR IRIS system. It requires the user to provide the Alert ID to specify which alert to delete. Optionally, the user can choose to receive the raw response from the API call. This operation is useful for managing and cleaning up alerts by removing those that are no longer relevant or needed.
Use Case Examples
- Deleting an alert by specifying its Alert ID to keep the alert list up to date.
- Using the 'Return Raw' option to get the full API response for logging or debugging purposes.
Properties
| Name | Meaning |
|---|---|
| Alert ID | The unique identifier of the alert to be deleted, required to specify which alert to remove. |
| Options | Additional options for the delete operation, including whether to return the raw API response. |
Output
JSON
success- Indicates whether the alert was successfully deleted.message- A message providing additional information about the deletion result.
Dependencies
- Requires an API key credential for authenticating with the DFIR IRIS system.
Troubleshooting
- Ensure the Alert ID is correct and exists in the system; otherwise, the deletion will fail.
- If the API key credential is missing or invalid, authentication errors will occur.
- If 'Return Raw' is enabled, the output will be the raw API response, which may require additional parsing.