Skip to content

Remove FalconNgsSavedQuery

bk-cs edited this page Sep 2, 2025 · 2 revisions

Remove-FalconNgsSavedQuery

SYNOPSIS

Remove Falcon NGSIEM saved queries

DESCRIPTION

Requires 'NGSIEM Saved Queries: Write'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
Id String Saved query identifier X
Domain String Repository or view all
dashboards
falcon
third-party
X

SYNTAX

Remove-FalconNgsSavedQuery [-Id] <String> [-Domain] <String> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

DELETE /ngsiem-content/entities/savedqueries/v1

falconpy

DeleteSavedQuery

USAGE

2025-09-02: PSFalcon v2.2.9

Clone this wiki locally