---
title: Using the bulk delete option for client identifiers
description: You can use the bulk delete option to clear large numbers of false positive client identifiers.
component: pingintelligence
version: 5.2
page_id: pingintelligence:pingintelligence_reference_guide:pingintelligence_bulk_delete_client_identifiers
canonical_url: https://docs.pingidentity.com/pingintelligence/5.2/pingintelligence_reference_guide/pingintelligence_bulk_delete_client_identifiers.html
revdate: April 3, 2024
section_ids:
  about-this-task: About this task
  steps: Steps
  example: Example:
---

# Using the bulk delete option for client identifiers

You can use the bulk delete option to clear large numbers of false positive client identifiers.

## About this task

|   |                                                                                    |
| - | ---------------------------------------------------------------------------------- |
|   | You can also use the bulk delete option to clear the blocklist in case of a reset. |

## Steps

1. To bulk delete client identifiers, use the ABS attacklist REST API with the DELETE method:

   * `URL: /v4/abs/attacklist`

   * `Method: DELETE`

2. To bulk delete all the entries of a client identifier or all client identifiers, configure the body of the attacklist.

   ### Example:

   The following is an example of the application programming interface (API) *(tooltip: \<div class="paragraph">
   \<p>A specification of interactions available for building software to access an application or service.\</p>
   \</div>)* request:

   ```json
   {
   	delete_all: false,
   	delete_all_ips: true,
   	delete_all_cookies: true,
   	delete_all_oauth_tokens: false,
   	delete_all_api_keys: true,
   	delete_all_usernames: false,
   }
   ```

   |   |                                                                                                                                                                                                                                                                                                                                                                                                           |
   | - | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | In the sample request body, the attacklist API deletes all entries for Internet Protocol (IP) *(tooltip: \<div class="paragraph">&#xA;\<p>The method by which data is sent across the internet from the source host to the destination host.\</p>&#xA;\</div>)*, cookies, and API keys. If, in the next time interval, the AI engine flags the same client identifiers, the blocklist is populated again. |

3. To permanently stop a false positive from being reported, tune the thresholds using the PingIntelligence Web GUI for the specific client identifier.

   The following table describes the options.

   | Option                    | Description                                                                                                                                                                                                                                                  |
   | ------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
   | `delete_all`              | This option overrides all the other configured options in the message body. If it is set to `true`, all the client identifiers are deleted irrespective of what their individual configuration is. Set it to `false`, if you want to exercise other options. |
   | `delete_all_ips`          | Set it true to delete all the IP addresses across all attack types from the blocklist.                                                                                                                                                                       |
   | `delete_all_cookies`      | Set it true to delete all the cookies across all attack types from the blocklist.                                                                                                                                                                            |
   | `delete_all_oauth_tokens` | Set it true to delete all the OAuth token across all attack types from the blocklist.                                                                                                                                                                        |
   | `delete_all_api_keys`     | Set it true to delete all the API Keys across all attack types from the blocklist.                                                                                                                                                                           |
   | `delete_all_usernames`    | Set it true to delete all the usernames across all attack types from the blocklist.                                                                                                                                                                          |
