Get FalconNgsLookupFile - CrowdStrike/psfalcon GitHub Wiki
Search for Falcon NGSIEM lookup files
Requires 'NGSIEM Lookup Files: Read'.
| Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
|---|---|---|---|---|---|---|---|
| Filename | String | Lookup file name | X | ||||
| Domain | String | Repository or view to search |
alldashboardsfalconparsers-repositorythird-party
|
X | |||
| Filter | String | Falcon Query Language expression to limit results | |||||
| Limit | String | Maximum number of results per request [default: 50] | |||||
| Offset | String | Position to begin retrieving results | |||||
| Detailed | Switch | Retrieve detailed information | |||||
| All | Switch | Repeat requests until all available results are retrieved | |||||
| Total | Switch | Display total result count instead of results |
Get-FalconNgsLookupFile [-Domain] <String> [[-Filter] <String>] [[-Limit] <String>] [-Offset <String>] [-Detailed] [-All] [-Total] [-WhatIf] [-Confirm] [<CommonParameters>]Get-FalconNgsLookupFile [-Filename] <String> [-Domain] <String> [-WhatIf] [-Confirm] [<CommonParameters>]GET /ngsiem-content/entities/lookupfiles/v1
GET /ngsiem-content/queries/lookupfiles/v1
2025-08-05: PSFalcon v2.2.9
