Security Requirements and Controls
Stability Level Long-Term

Email actions can be useful in informing the right people of problems on a server. However, you might create too many actions, which can lead to people ignoring them. To delete an action, you can use the deleteActionV2() GraphQL mutation.

Rather than delete an action, you could make changes to it with the updateEmailAction() mutation. Or you can delete it and then use the createEmailAction() mutation to start fresh by making a new email action.

Hide Query Example

Show Email Actions Query

For more information on creating an action, see the Actions documentation page.

Syntax

graphql
deleteActionV2(
       input: DeleteActionV2!
    ): boolean

You'll have to provide the name of the repository or view, and the unique identifier of the email action to delete. Click on the Show Query link above for an example of how to get this identifier.

There are no special return datatypes for this mutation field. You'll get true in the results if it's successful. If the email action does not exist, false will be returned. For other failures, you'll get null with an error message.

Example

Raw
graphql
mutation {
  deleteActionV2(input:
    {viewName: "humio", 
     id: "abc123" } )
}
Mac OS or Linux (curl)
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "mutation {
  deleteActionV2(input:
    {viewName: \"humio\", 
     id: \"abc123\" } )
}"
}
EOF
Mac OS or Linux (curl) One-line
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "mutation {
  deleteActionV2(input:
    {viewName: \"humio\", 
     id: \"abc123\" } )
}"
}
EOF
Windows Cmd and curl
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql ^
    -H "Authorization: Bearer $TOKEN" ^
    -H "Content-Type: application/json" ^
    -d @'{"query" : "mutation { ^
  deleteActionV2(input: ^
    {viewName: \"humio\",  ^
     id: \"abc123\" } ) ^
}" ^
} '
Windows Powershell and curl
powershell
curl.exe -X POST 
    -H "Authorization: Bearer $TOKEN"
    -H "Content-Type: application/json"
    -d '{"query" : "mutation {
  deleteActionV2(input:
    {viewName: \"humio\", 
     id: \"abc123\" } )
}"
}'
    "$YOUR_LOGSCALE_URL/graphql"
Perl
perl
#!/usr/bin/perl

use HTTP::Request;
use LWP;

my $TOKEN = "TOKEN";

my $uri = '$YOUR_LOGSCALE_URL/graphql';

my $query = "mutation {
  deleteActionV2(input:
    {viewName: \"humio\", 
     id: \"abc123\" } )
}";
$query =~ s/\n/ /g;
my $json = sprintf('{"query" : "%s"}',$query);
my $req = HTTP::Request->new("POST", $uri );

$req->header("Authorization" => "Bearer $TOKEN");
$req->header("Content-Type" => "application/json");

$req->content( $json );

my $lwp = LWP::UserAgent->new;

my $result = $lwp->request( $req );

print $result->{"_content"},"\n";
Python
python
#! /usr/local/bin/python3

import requests

url = '$YOUR_LOGSCALE_URL/graphql'
mydata = r'''{"query" : "mutation {
  deleteActionV2(input:
    {viewName: \"humio\", 
     id: \"abc123\" } )
}"
}'''

resp = requests.post(url,
                     data = mydata,
                     headers = {
   "Authorization" : "Bearer $TOKEN",
   "Content-Type" : "application/json"
}
)

print(resp.text)
Node.js
javascript
const https = require('https');

const data = JSON.stringify(
    {"query" : "mutation {
  deleteActionV2(input:
    {viewName: \"humio\", 
     id: \"abc123\" } )
}"
}
);


const options = {
  hostname: '$YOUR_LOGSCALE_URL',
  path: 'graphql',
  port: 443,
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Content-Length': data.length,
    Authorization: 'BEARER ' + process.env.TOKEN,
    'User-Agent': 'Node',
  },
};

const req = https.request(options, (res) => {
  let data = '';
  console.log(`statusCode: ${res.statusCode}`);

  res.on('data', (d) => {
    data += d;
  });
  res.on('end', () => {
    console.log(JSON.parse(data).data);
  });
});

req.on('error', (error) => {
  console.error(error);
});

req.write(data);
req.end();
Example Responses
Success (HTTP Response Code 200 OK)
json
{
  "data": {
    "deleteActionV2": true
    }
}

Given Datatype

For this input datatype, you would give the unique identifier of the action to delete, and the name of the associated repository or view. Click on the Show Query link above the Syntax section for an example of how to get the email action identifiers.

Table: DeleteActionV2

ParameterTypeRequiredDefaultStabilityDescription
Some arguments may be required, as indicated in the Required column. For return datatypes, this indicates that you must specify which fields you want returned in the results.
Table last updated: Sep 29, 2025
idstringyes Long-TermThe unique identifier of the action.
viewNameRepoOrViewNameyes Long-TermThe name of the view of the action. RepoOrViewName is a scalar.