๐Ÿ”’Security Requirements and Controls
๐ŸŽฏAPI Stability
Long-TermThis API is stable and will remain supported across versions with minimal breaking changes.

Summary

The deleteLegacyAlert() mutation permanently removes a legacy alert from a LogScale repository or view. Legacy alerts are the original alert type in LogScale, predating the filter alert and aggregate alert types. This operation is irreversible; the alert configuration cannot be recovered after deletion. The mutation returns true on success, false if the specified alert does not exist, and null if an unexpected server error occurs.

Syntax

graphql
deleteLegacyAlert(
      input: DeleteAlertV2!
   ): Boolean

The input argument accepts a required DeleteAlertV2 object containing the name of the repository or view and the unique identifier of the legacy alert to delete. The mutation returns a nullable Boolean: true on success, false if the alert does not exist, and null on unexpected server errors. See the Input Parameters section for field details.

Example

Raw
graphql
mutation {
  deleteLegacyAlert(input: 
    {viewName: "humio", 
     id: "abc123" }
  )
}
Mac OS or Linux (curl)
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "mutation {
  deleteLegacyAlert(input: 
    {viewName: \"humio\", 
     id: \"abc123\" }
  )
}"
}
EOF
Mac OS or Linux (curl) One-line
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "mutation {
  deleteLegacyAlert(input: 
    {viewName: \"humio\", 
     id: \"abc123\" }
  )
}"
}
EOF
Windows Cmd and curl
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql ^
    -H "Authorization: Bearer $TOKEN" ^
    -H "Content-Type: application/json" ^
    -d @'{"query" : "mutation { ^
  deleteLegacyAlert(input:  ^
    {viewName: \"humio\",  ^
     id: \"abc123\" } ^
  ) ^
}" ^
} '
Windows Powershell and curl
powershell
curl.exe -X POST 
    -H "Authorization: Bearer $TOKEN"
    -H "Content-Type: application/json"
    -d '{"query" : "mutation {
  deleteLegacyAlert(input: 
    {viewName: \"humio\", 
     id: \"abc123\" }
  )
}"
}'
    "$YOUR_LOGSCALE_URL/graphql"
Perl
perl
#!/usr/bin/perl

use HTTP::Request;
use LWP;

my $TOKEN = "TOKEN";

my $uri = '$YOUR_LOGSCALE_URL/graphql';

my $query = "mutation {
  deleteLegacyAlert(input: 
    {viewName: \"humio\", 
     id: \"abc123\" }
  )
}";
$query =~ s/\n/ /g;
my $json = sprintf('{"query" : "%s"}',$query);
my $req = HTTP::Request->new("POST", $uri );

$req->header("Authorization" => "Bearer $TOKEN");
$req->header("Content-Type" => "application/json");

$req->content( $json );

my $lwp = LWP::UserAgent->new;

my $result = $lwp->request( $req );

print $result->{"_content"},"\n";
Python
python
#! /usr/local/bin/python3

import requests

url = '$YOUR_LOGSCALE_URL/graphql'
mydata = r'''{"query" : "mutation {
  deleteLegacyAlert(input: 
    {viewName: \"humio\", 
     id: \"abc123\" }
  )
}"
}'''

resp = requests.post(url,
                     data = mydata,
                     headers = {
   "Authorization" : "Bearer $TOKEN",
   "Content-Type" : "application/json"
}
)

print(resp.text)
Node.js
javascript
const https = require('https');

const data = JSON.stringify(
    {"query" : "mutation {
  deleteLegacyAlert(input: 
    {viewName: \"humio\", 
     id: \"abc123\" }
  )
}"
}
);


const options = {
  hostname: '$YOUR_LOGSCALE_URL',
  path: 'graphql',
  port: 443,
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Content-Length': data.length,
    Authorization: 'BEARER ' + process.env.TOKEN,
    'User-Agent': 'Node',
  },
};

const req = https.request(options, (res) => {
  let data = '';
  console.log(`statusCode: ${res.statusCode}`);

  res.on('data', (d) => {
    data += d;
  });
  res.on('end', () => {
    console.log(JSON.parse(data).data);
  });
});

req.on('error', (error) => {
  console.error(error);
});

req.write(data);
req.end();
Example Responses
Success (HTTP Response Code 200 OK)
json
{
  "data": {
    "deleteLegacyAlert": true
  }
}

Input Parameters

The input argument requires a DeleteAlertV2 object. Provide the unique identifier of the legacy alert and the name of the associated repository or view. Select Show Alerts Query in the Related section to retrieve alert identifiers.