We've reorganized our documentation navigation structure to align directly with your operational workflows. See the release notes and the walkthrough video for more information.

DeleteForwarder parity mapping

Supported in:

Google secops SIEM

This guide details the request and response mapping specifications and property parity analysis for migrating from the legacy Backstory Ingestion Forwarder API (DeleteForwarder) to the modern Chronicle API (DeleteForwarder).

Protocol and mapping overview

Feature	Legacy API (`DeleteForwarder`)	Modern Chronicle API (`DeleteForwarder`)
HTTP method	`DELETE`	`DELETE`
Permissions	Partner token or legacy API keys	`chronicle.googleapis.com/forwarders.delete`

Request payload field-by-field parity

The modern Chronicle API DeleteForwarderRequest targets resources using Google Cloud resource name paths.

Legacy field (`DeleteForwarderRequest`)	Modern field (`DeleteForwarderRequest`)	Field type	Parity and migration notes
`name`	`name` (in HTTP path)	`string`	Google Cloud scoping context: The legacy request used path format `forwarders/<forwarder_id>`. The modern API routes this using the standard Google Cloud resource tree structure: `projects/{project}/locations/{location}/instances/{instance}/forwarders/{forwarder_id}`.

Response payload field-by-field parity

Both APIs return an empty response message.

Legacy field	Modern field	Field type	Parity and migration notes
`google.protobuf.Empty`	`google.protobuf.Empty`	`Empty`	Parity mapped: Successful requests return HTTP 200 OK (mapping to an empty response object `{}`).

Key differences

Google Cloud project scoping integration:
- Scoped natively under parent project instance folder bindings.
Resource path renaming:
- Legacy path formats forwarders/<forwarder_id> are migrated to standard Google Cloud path parameters projects/{project}/locations/{location}/instances/{instance}/forwarders/{forwarder_id}.