Get FalconStream - CrowdStrike/psfalcon GitHub Wiki
Retrieve event streams
Requires 'Event streams: Read'.
Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
---|---|---|---|---|---|---|---|
AppId | String | Connection label | |||||
Format | String | Format for streaming events [default: json] |
json flatjson
|
Get-FalconStream [-AppId] <String> [[-Format] <String>] [-WhatIf] [-Confirm] [<CommonParameters>]
GET /sensors/entities/datafeed/v2
Get-FalconStream -AppId psfalcon
2023-04-25: PSFalcon v2.2.5