Edit FalconNgsCaseTemplate - CrowdStrike/psfalcon GitHub Wiki
Modify a Falcon NGSIEM case template
Requires 'Case Templates: Write'.
Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
---|---|---|---|---|---|---|---|
Name | String | Case template name | X | ||||
Description | String | Case template description | X | ||||
SlaId | String | SLA identifier | X | ||||
Field | Object[] | Objects containing 'fields' properties ('data_type', 'input_type', 'multivalued', 'name', 'options', 'required') | X | ||||
Id | String | Case template identifier | X | X |
Edit-FalconNgsCaseTemplate [[-Name] <String>] [[-Description] <String>] [[-SlaId] <String>] [[-Field] <Object[]>] [-Id] <String> [-WhatIf] [-Confirm] [<CommonParameters>]
PATCH /casemgmt/entities/templates/v1
Edit-FalconNgsCaseTemplate -Name 'Priority Template' -Description 'Template for priority cases' -SlaId <id> -Field @{ data_type = 'string'; input_type = 'dropdown'; multivalued = $true; name = 'Priority'; options = @(@{ value = 'High' },@{ value = 'Medium' },@{ value = 'Low' }); required = $true }, @{ data_type = 'string'; input_type = 'textarea'; multivalued = $false; name = 'Description'; required = $false } -Id <id>
2025-09-26: PSFalcon v2.2.9