Edit FalconNgsCaseSla - CrowdStrike/psfalcon GitHub Wiki
Modify a Falcon NGSIEM case SLA
Requires 'Case Templates: Write'.
| Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
|---|---|---|---|---|---|---|---|
| Name | String | SLA name | X | ||||
| Description | String | SLA description | X | ||||
| Goal | Object[] | Objects containing 'goals' properties ('duration_seconds', 'escalation_policy', 'type') | X | ||||
| Id | String | SLA identifier | X | X |
Edit-FalconNgsCaseSla [[-Name] <String>] [[-Description] <String>] [[-Goal] <Object[]>] [-Id] <String> [-WhatIf] [-Confirm] [<CommonParameters>]PATCH /casemgmt/entities/slas/v1
Edit-FalconNgsCaseSla -Name 'high severity' -Description 'SLA for high severity cases' -Goal @{ duration_seconds = 120; escalation_policy = @{ steps = @(@{ escalate_after_seconds = 0; notification_group_id = 'id' })}; type = 'ack' }, @{ duration_seconds = 300; type = 'resolve' } -Id <id>2025-09-26: PSFalcon v2.2.9
