Edit FalconNgsDataConnection - CrowdStrike/psfalcon GitHub Wiki
Modify a Falcon NGSIEM data connection
Requires 'NGSIEM Data Connections API: Write'.
| Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
|---|---|---|---|---|---|---|---|
| Id | String | Data connection identifier | X | X | |||
| Name | String | Data connection name | 1 |
50 |
X | ||
| Parser | String | Parser name | X | ||||
| Description | String | Data connection description | 1 |
500 |
X | ||
| ConfigId | String | Configuration identifier | X | ||||
| Config | Object | An object containing external data source connection settings ('auth', 'name', 'params') | X | ||||
| HostEnrichment | Boolean | Enable host enrichment | X | ||||
| UserEnrichment | Boolean | Enable user enrichment | X |
Edit-FalconNgsDataConnection [-Id] <String> [[-Name] <String>] [[-Parser] <String>] [[-Description] <String>] [[-ConfigId] <String>] [[-Config] <Object>] [[-HostEnrichment] <Boolean>] [[-UserEnrichment] <Boolean>] [-WhatIf] [-Confirm] [<CommonParameters>]PATCH /ngsiem/entities/connections/v1
2025-12-23: PSFalcon v2.3.0
