Skip to main content
Version: v5.6.1

opschain admin siem delete

Included from Basic tier

Deletes a SIEM forwarder connection by code or id. Forwarding stops from the next sweep and the connection's delivery cursor is removed with it — recreating the code later starts fresh from the newest event, never a replay of the gap.

opschain admin siem delete soc-syslog
Deleted SIEM connection soc-syslog

Flags​

FlagMeaning
--server <url>Server base URL (default: the active context / OPSCHAIN_SERVER).
--auth-token <token>Admin bearer token override (default: your opschain login session, then $OPSCHAIN_ADMIN_TOKEN, then the token stored by opschain admin login).

See also​

  • opschain docs cli/admin-siem-update — disable a connection instead, keeping its cursor for a later resume.