/bulk
The bulk endpoint is very resource intensive. Requests that are too large may fail. It is recommended to minimize the payload size of requests to bulk.
Methods
Performs a bulk action, depending on access and permissions.
NOTE #1: Currently supported bulk actions (with links to their respective documentation):
- /asset::DELETE
- /asset::POST
- /asset/<id>::PATCH
- /dashboard/<id>/component::POST
- /dashboard/<id>/component/<id>::PATCH
- /hosts/acr::PATCH
- /query::POST
- /query/<id>::GET
- /query/<id>::PATCH
- /recastRiskRule::PATCH
NOTE #2: If a bulk post fails on one object, the bulk operation will continue to attempt other objects, return a fail response indicating failed objects, and rollback all bulk actions.
NOTE #2: For a bulk ACR edit, which is bulk action /hosts/acr::PATCH, all bulk operations that are successful will make the change to the object, and the bulk operations that fail will of course not make the change. But there will be a fail response for the overall bulk request and the returned fail response indicates which operations failed. All operations are attempted even if some fail.
Request Parameters
Example Response