Remove FalconNgsSavedQuery - CrowdStrike/psfalcon GitHub Wiki

Remove-FalconNgsSavedQuery

SYNOPSIS

Remove Falcon NGSIEM saved queries

DESCRIPTION

Requires 'NGSIEM Saved Queries: Write'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
Id String Saved query identifier X
Domain String Repository or view all
dashboards
falcon
third-party 		X

SYNTAX

Remove-FalconNgsSavedQuery [-Id] <String> [-Domain] <String> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

DELETE /ngsiem-content/entities/savedqueries/v1

USAGE

2025-08-05: PSFalcon v2.2.9

⚠️ **GitHub.com Fallback** ⚠️