Get FalconFoundrySearch - CrowdStrike/psfalcon GitHub Wiki
Get the results of a saved search
Requires 'App Logs: Read'.
| Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
|---|---|---|---|---|---|---|---|
| Id | String | Search identifier | |||||
| AppId | String | Foundry application identifier | |||||
| InferJsonTypes | Boolean | Whether to try to infer data types in json event response instead of returning map[string]string | |||||
| Limit | String | Maximum number of results per request | |||||
| MatchResponseSchema | Boolean | Whether to validate search results against their schema | |||||
| Metadata | Boolean | Whether to include metadata in the response | |||||
| Offset | String | Position to begin retrieving results |
Get-FalconFoundrySearch [-Id] <String> [[-AppId] <String>] [[-InferJsonTypes] <Boolean>] [[-Limit] <String>] [[-MatchResponseSchema] <Boolean>] [[-Metadata] <Boolean>] [-Offset <String>] [-WhatIf] [-Confirm] [<CommonParameters>]GET /loggingapi/entities/saved-searches/execute/v1
2024-09-03: PSFalcon v2.2.7
