Delete Fabric Connector from Event Handler

Delete Fabric Connector from Event Handler#

Unlink an automation connector from an event handler.

✅ All code examples tested: Verified against FortiAnalyzer v7.4.8, v7.6.4, v8.0.0.

Overview#

This endpoint removes automation connector associations from event handlers - useful for:

  • Removing deprecated webhook integrations from event handlers

  • Changing event routing configurations

  • Decommissioning retired SIEM/SOAR connections

  • Troubleshooting event forwarding issues

  • Managing event handler lifecycle

Endpoint Details#

Method: POST URL: /jsonrpc API Path: /eventmgmt/adom/{adom}/config/trigger/{eid}/fabric-connector/{connector_name} ADOM Support: Yes Requires Authentication: Yes Minimum Version: 7.4.0

Request Example#

{
    "method": "delete",
    "params": [{
        "url": "/eventmgmt/adom/root/config/trigger/1/fabric-connector/Splunk_HEC"
    }],
    "session": "{{session_id}}",
    "id": 1
}

{
    "result": [{
        "data": {},
        "status": {
            "code": 0,
            "message": "OK"
        },
        "url": "/eventmgmt/adom/root/config/trigger/1/fabric-connector/Splunk_HEC"
    }],
    "session": "{{session_id}}",
    "id": 1
}

Complete Python Example#

import requests
import urllib3

urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)

def delete_fabric_connector_from_event_handler(session_id, adom, event_handler_id, connector_name):
    """
    Unlink automation connector from event handler

    Args:
        session_id: Active session ID
        adom: ADOM name
        event_handler_id: Event handler ID (integer)
        connector_name: Name of connector to unlink

    Returns:
        bool: True if successful
    """
    url = "https://faz.example.com/jsonrpc"

    payload = {
        "method": "delete",
        "params": [{
            "url": f"/eventmgmt/adom/{adom}/config/trigger/{event_handler_id}/fabric-connector/{connector_name}"
        }],
        "session": session_id,
        "id": 1
    }

    response = requests.post(url, json=payload, verify=False)
    result = response.json()

    if result['result'][0]['status']['code'] == 0:
        print(f"✓ Unlinked connector '{connector_name}' from event handler {event_handler_id}")
        return True
    else:
        raise Exception(f"API error: {result['result'][0]['status']['message']}")

# Example: Remove Slack connector from event handler
delete_fabric_connector_from_event_handler(
    session_id="your_session_id",
    adom="root",
    event_handler_id=1,
    connector_name="Slack_Security_Channel"
)

Use Cases#

Remove Deprecated Connector#

# Remove old test connector from event handler
delete_fabric_connector_from_event_handler(
    session_id=session,
    adom="root",
    event_handler_id=1,
    connector_name="Old_Test_Webhook"
)

Cleanup Multiple Connectors#

# Remove multiple deprecated connectors from handler
deprecated_connectors = ["Old_Splunk_Test", "Deprecated_Teams", "Test_Webhook"]

for connector in deprecated_connectors:
    try:
        delete_fabric_connector_from_event_handler(
            session_id=session,
            adom="root",
            event_handler_id=1,
            connector_name=connector
        )
        print(f"✓ Removed: {connector}")
    except Exception as e:
        print(f"✗ Failed to remove {connector}: {e}")

Safe Delete with Verification#

# Verify connector exists before deleting
from get_fabric_connector_eventhandler import get_event_handler_connectors

connectors = get_event_handler_connectors(
    session_id=session,
    adom="root",
    event_handler_id=1
)

connector_names = [c['name'] for c in connectors]
connector_to_delete = "Old_Integration"

if connector_to_delete in connector_names:
    confirm = input(f"Remove connector '{connector_to_delete}' from event handler? (yes/no): ")

    if confirm.lower() == 'yes':
        delete_fabric_connector_from_event_handler(
            session_id=session,
            adom="root",
            event_handler_id=1,
            connector_name=connector_to_delete
        )
else:
    print(f"✗ Connector '{connector_to_delete}' not linked to this handler")

Best Practices#

⚠️ Warning: Unlinking a connector immediately stops event forwarding to that destination. Verify the connector is no longer needed before removal.

💡 Tip: List connectors using Get Fabric Connector Event Handlers before deletion to ensure you’re removing the correct association.

💡 Tip: The connector itself (webhook configuration) remains intact after unlinking. Only the association to the event handler is removed.

On this page