Log Sources
DELETE /v1/config/log-sources/{id}
Delete a single log source
Permanently deletes a single log source from the current project. After deletion, analyses on this project will no longer query the source's log groups, indexes, or selectors.
Authentication
API key with config:write permission.
Endpoint
DELETE /v1/config/log-sources/{id}Path parameters
| Param | Type | Notes |
|---|---|---|
id | UUID | The log source id |
Response
200 OK
{
"success": true,
"data": {
"deleted": true
}
}Error responses
| Status | error.code | When |
|---|---|---|
| 400 | VALIDATION_ERROR | id is not a UUID |
| 401 | UNAUTHORIZED | Missing or invalid API key |
| 403 | FORBIDDEN | Key lacks config:write |
| 404 | NOT_FOUND | No log source with that id in your tenant |
Example
curl -X DELETE https://api.sigsentry.com/v1/config/log-sources/ls_a1b2c3 \
-H "Authorization: Bearer ss_secret_..."Soft pause vs. delete
Deleting is permanent. If you only want to stop querying a source
temporarily, update it with
{ "isActive": false } instead — credentials and selections are
preserved and you can re-enable it later with
{ "isActive": true }.