Technical Note: [FortiSOAR / Cybersponse Tricks'n'Tips] Scheduler not getting stopped even-though it deleted from UI.
Description
Even though you stop or delete the schedule from schedules for a particular playbook, the scheduler runs the playbook in workflow. In this case, simply delete the schedule from workflow using curl command.
Follow the below steps to delete the schedule.
1) ssh the box using root permissions.
2)curl -i -H "<Authorization: Bearer Certificate>" https://127.0.0.1/api/wf/api/scheduled/?format=json
Above command shows the playbook ids in workflow for schedules.
3)curl -X “DELETE” -H "<Authorization: Bearer Certificate>" https://127.0.0.1/api/wf/api/scheduled/<Playbook ID>/
Above command delete the playbook from workflow specified.