The best way to remove unused domain objects?

[akurtasanov]

Good day.

Is there a universal way to delete unused domain objects? I need to delete several hundred.

[Alex-]

You could use the Objects Explorer to show unused objects, filter on domain objects and delete them all.

Or use the "show-unused-objects" Management API endpoint, filter the output on object type, list and delete the relevant objects accordingly if you're in an automated environment.

[akurtasanov]

The problem is that domains are not tracked by this functionality.

[CaseyB]

I am told it supposed to work for un-used objects; however, it is bugged. I think it is on the low priority list for fixes sadly. The response I have for it was back in January 2025.

[the_rock]

It can be little finnicky...

[the_rock]

Good question...let me do some tests in the lab in the morning and will update you.

[akurtasanov]

Thanks.

Will wait.

[the_rock]

Will let you know soon.

[the_rock]

Just checked and it is there, in object explorer.

 

[Alex-]

If you switch from "All" to "Unused Objects" in the top left, you will notice that Domains are not listed.

So, another approach might be to list their name/uid with an API call, and iterate that list against the "where-used" endpoint.

Those which aren't used can be saved in a list and another automation could delete them after some verifications.

[the_rock]

Correct, but they are definitely listed there.

[akurtasanov]

I see all my 3109 domains in Object Explorer but none of them in Unused Objects. And I defenetly know and also see that most of them are not in use.

[the_rock]

Can you not delete them from there then? I know it would be way better if they show in unused objects. I will try do some more testing for this tomorrow in the lab.

[akurtasanov]

I did some testing on LAB GW. Same result.

[the_rock]

So you only see 1 unused, but you are saying there is way more than that?

[AkosBakos]

Hi,

A little bit off, but Algosec can do it semaless 🙂

Akos

[the_rock]

Never considered that.