Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Current »

To cancel the execution of an EDS request the EQL POST endpoint can be used.

This can be done using Swagger: https://webserver/mc2/swagger-ui/index.html?configUrl=/mc2/swagger-config#/eql-rest/submitEQLPOST

This also can be a direct POST to the eql endpoint:

curl -X 'POST' \
  'https://webserver/eagle/v2/eql' \
  -H 'accept: */*' \
  -H 'Content-Type: application/json' \
  -d '{
"actiontype": "CANCEL",
"cancelcorrelationid": "CORRID"
}
'

Retrieve the correlation ID of the EDS request to be canceled and post the following request:

{
    "actiontype": "CANCEL",
    "cancelcorrelationid": "CORRID_TO_CANCEL"
}
  • No labels