From c89ee905a64b4d1c708d36a338946eb578e0076d Mon Sep 17 00:00:00 2001 From: Andras Iklody Date: Wed, 18 Dec 2019 09:32:06 +0100 Subject: [PATCH] added bulk event deletion --- faq/README.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/faq/README.md b/faq/README.md index b080cca..f841f31 100644 --- a/faq/README.md +++ b/faq/README.md @@ -288,6 +288,18 @@ Execute this for each feed that you had enabled, replacing user_id with your adm *Step 4:* recorrelate your data, depending on which method you've used in *Step 2* you have two options: - either go to your *Administration* -> *Server Settings...* -> *MISP...* tab and set `MISP.completely_disable_correlation` to *false* - recorrelate your current data-set via the recorrelate attributes tool on `/pages/display/administration` + +### I have a long list of events that I want to delete via the API, do I really have to loop through each and issue a delete to /events/delete? + +No, the delete action also accepts a list of IDs when it comes to bulk event deletions. + +Simply POST your ID list to `/events/delete` in the following format: + +``` +{ + "id": [1,3,5,7,9] +} +``` ### I can no longer log in. How do I reset the admin password?