Edit FalconItScheduledTask - CrowdStrike/psfalcon GitHub Wiki
Modify Falcon for IT scheduled tasks
Requires 'IT Automation - Task Executions: Write'.
Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
---|---|---|---|---|---|---|---|
Id | String | Scheduled task identifier | X | X | |||
Target | String | Falcon Query Language expression to define target hosts | X | ||||
Schedule | Object | Key/value pairs to define task scheduling | X | ||||
Enabled | Boolean | Scheduled task enablement status | X | ||||
Trigger | Object[] | Trigger condition | X | ||||
ExecutionArg | Object | Key/value pairs to define arguments during execution of an existing task | X | ||||
DiscoverOffline | Boolean | Discover offline hosts | X | ||||
DiscoverNew | Boolean | Discover new hosts | X | ||||
Guardrail | Object | Execution guardrails and limits | X | ||||
Distribute | Boolean | Distribute task | X | ||||
ExpirationInterval | String | Duration for which the task stays active. Once expired, new and offline hosts won't be targeted. Example: 1m | X |
Edit-FalconItScheduledTask [-Id] <String> [[-Target] <String>] [[-Schedule] <Object>] [[-Enabled] <Boolean>] [[-Trigger] <Object[]>] [[-ExecutionArg] <Object>] [[-DiscoverOffline] <Boolean>] [[-DiscoverNew] <Boolean>] [[-Guardrail] <Object>] [[-Distribute] <Boolean>] [[-ExpirationInterval] <String>] [-WhatIf] [-Confirm] [<CommonParameters>]
PATCH /it-automation/entities/scheduled-tasks/v1
Edit-FalconItScheduledTask -Id <id> -Enabled $true -Schedule @{ timezone = '-0500'; start_time = '2025-04-25T22:17:00.000Z'; frequency = 'Monthly'; day_of_month = 2; time = '17:17' }
2025-08-04: PSFalcon v2.2.9